CVE-2012-4450

Severity: medium (CVSS 6.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-10-01 · updated 2026-06-16
Weakness: CWE-264

Description

389 Directory Server 1.2.10 does not properly update the ACL when a DN entry is moved by a modrdn operation, which allows remote authenticated users with certain permissions to bypass ACL restrictions and access the DN entry.

Affected products

Red Hat, Inc. 389-ds-base: 1.2.10

References

http://git.fedorahosted.org/cgit/389/ds.git/commit/?id=5beb93d42efb807838c09c5fab898876876f8d09
http://rhn.redhat.com/errata/RHSA-2013-0503.html
http://secunia.com/advisories/50713
http://www.openwall.com/lists/oss-security/2012/09/26/3
http://www.openwall.com/lists/oss-security/2012/09/26/5
http://www.securityfocus.com/bid/55690
https://bugzilla.redhat.com/show_bug.cgi?id=860772
https://fedorahosted.org/389/ticket/340
http://git.fedorahosted.org/cgit/389/ds.git/commit/?id=5beb93d42efb807838c09c5fab898876876f8d09
http://rhn.redhat.com/errata/RHSA-2013-0503.html
http://secunia.com/advisories/50713
http://www.openwall.com/lists/oss-security/2012/09/26/3

Get alerted when CVE-2012-4450 or the next vulnerability affects your stack