CVE - CVE-2012-2678

CVE-ID
CVE-2012-2678	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server before 8.2.10-3), after the password for a LDAP user has been changed and before the server has been reset, allows remote attackers to read the plaintext password via the unhashed#user#password attribute.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
CONFIRM:http://directory.fedoraproject.org/wiki/Release_Notes HP:HPSBUX02881 URL:https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03772083 HP:SSRT101189 URL:https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03772083 REDHAT:RHSA-2012:0997 URL:http://rhn.redhat.com/errata/RHSA-2012-0997.html REDHAT:RHSA-2012:1041 URL:http://rhn.redhat.com/errata/RHSA-2012-1041.html BID:54153 URL:http://www.securityfocus.com/bid/54153 OSVDB:83336 URL:http://osvdb.org/83336 OVAL:oval:org.mitre.oval:def:19353 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19353 SECUNIA:49734 URL:http://secunia.com/advisories/49734
Assigning CNA
N/A
Date Entry Created
20120514	Disclaimer: The entry creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20120514)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an entry on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org