Candidate: CVE-2011-0704 PublicDate: 2018-05-04 20:29:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0704 https://bugzilla.redhat.com/show_bug.cgi?id=675320 https://bugzilla.redhat.com/show_bug.cgi?id=676876 Description: 389 Directory Server 1.2.7.5, when built with mozldap, allows remote attackers to cause a denial of service (replica crash) by sending an empty modify request. Ubuntu-Description: Notes: Bugs: Priority: medium Discovered-by: Assigned-to: CVSS: nvd: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H [5.9 MEDIUM] Patches_389-ds-base: upstream_389-ds-base: released (1.2.8) precise/esm_389-ds-base: DNE trusty_389-ds-base: ignored (reached end-of-life) trusty/esm_389-ds-base: DNE (trusty was not-affected [1.3.2.16-0ubuntu1]) xenial_389-ds-base: ignored (end of standard support, was not-affected [1.3.4.9-1]) artful_389-ds-base: ignored (reached end-of-life) bionic_389-ds-base: not-affected (1.3.7.10-1ubuntu1) cosmic_389-ds-base: ignored (reached end-of-life) disco_389-ds-base: ignored (reached end-of-life) eoan_389-ds-base: ignored (reached end-of-life) focal_389-ds-base: not-affected (1.4.3.6-2) groovy_389-ds-base: ignored (reached end-of-life) hirsute_389-ds-base: not-affected (1.4.4.11-1) impish_389-ds-base: not-affected (1.4.4.11-2build1) jammy_389-ds-base: not-affected (2.0.11-2) devel_389-ds-base: not-affected (2.0.11-2)