What’s Vulnerable › Vulnerabilities

CVE-2013-4485

• Severity: medium (CVSS 4.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2013-11-23 · updated 2026-06-16
• Weakness: CWE-20

Description

389 Directory Server 1.2.11.15 (aka Red Hat Directory Server before 8.2.11-14) allows remote authenticated users to cause a denial of service (crash) via multiple @ characters in a GER attribute list in a search request.

Affected products

• Red Hat, Inc. 389-ds-base: 1.2.11.15
• RedHat Directory Server: through 8.2; 7.1, 8.0, 8.1
• Red Hat Enterprise Linux: 6.0

References

• http://rhn.redhat.com/errata/RHSA-2013-1752.html
• http://rhn.redhat.com/errata/RHSA-2013-1753.html
• http://secunia.com/advisories/55765
• http://rhn.redhat.com/errata/RHSA-2013-1752.html
• http://rhn.redhat.com/errata/RHSA-2013-1753.html
• http://secunia.com/advisories/55765

Get alerted when CVE-2013-4485 or the next vulnerability affects your stack