CVE-2012-0833
The acllas__handle_group_entry function in servers/plugins/acl/acllas.c in 389 Directory Server...
The acllas__handle_group_entry function in servers/plugins/acl/acllas.c in 389 Directory Server before 1.2.10 does not properly handled access control instructions (ACIs) that use certificate groups, which allows remote authenticated LDAP users with a certificate group to cause a denial of service (infinite loop and CPU consumption) by binding to the server.
Exploit likelihood
What each source reports
NVD Score used
The acllas__handle_group_entry function in servers/plugins/acl/acllas.c in 389 Directory Server before 1.2.10 does not properly handled access control instructions (ACIs) that use certificate groups, which allows remote authenticated LDAP users with a certificate group to cause a denial of service (infinite loop and CPU consumption) by binding to the server.
- Record
CVE-2012-0833- CVSS 2.0
- 2.3 Low
AV:A/AC:M/Au:S/C:N/I:N/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The acllas__handle_group_entry function in servers/plugins/acl/acllas.c in 389 Directory Server before 1.2.10 does not properly handled access control instructions (ACIs) that use certificate groups, which allows remote authenticated LDAP users with a certificate group to cause a denial of service (infinite loop and CPU consumption) by binding to the server.
- Record
CVE-2012-0833- Updated
- 2026-11-02
EUVDEUVD-2012-0859 No score
The acllas__handle_group_entry function in servers/plugins/acl/acllas.c in 389 Directory Server before 1.2.10 does not properly handled access control instructions (ACIs) that use certificate groups, which allows remote authenticated LDAP users with a certificate group to cause a denial of service (infinite loop and CPU consumption) by binding to the server.
- Record
EUVD-2012-0859- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-29ch-37gp-6r87 No score
The acllas__handle_group_entry function in servers/plugins/acl/acllas.c in 389 Directory Server...
The acllas__handle_group_entry function in servers/plugins/acl/acllas.c in 389 Directory Server before 1.2.10 does not properly handled access control instructions (ACIs) that use certificate groups, which allows remote authenticated LDAP users with a certificate group to cause a denial of service (infinite loop and CPU consumption) by binding to the server.
- Record
GHSA-29ch-37gp-6r87- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
389-ds-baseRed Hat:enterprise_linux:6::client |
before 0:1.2.10.2-15.el6 | 0:1.2.10.2-15.el6 |
389-ds-base-debuginfoRed Hat:enterprise_linux:6::client |
before 0:1.2.10.2-15.el6 | 0:1.2.10.2-15.el6 |
389-ds-base-develRed Hat:enterprise_linux:6::client |
before 0:1.2.10.2-15.el6 | 0:1.2.10.2-15.el6 |
389-ds-base-libsRed Hat:enterprise_linux:6::client |
before 0:1.2.10.2-15.el6 | 0:1.2.10.2-15.el6 |
389-ds-baseRed Hat:enterprise_linux:6::computenode |
before 0:1.2.10.2-15.el6 | 0:1.2.10.2-15.el6 |
389-ds-base-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:1.2.10.2-15.el6 | 0:1.2.10.2-15.el6 |
389-ds-base-develRed Hat:enterprise_linux:6::computenode |
before 0:1.2.10.2-15.el6 | 0:1.2.10.2-15.el6 |
389-ds-base-libsRed Hat:enterprise_linux:6::computenode |
before 0:1.2.10.2-15.el6 | 0:1.2.10.2-15.el6 |
389-ds-baseRed Hat:enterprise_linux:6::server |
before 0:1.2.10.2-15.el6 | 0:1.2.10.2-15.el6 |
389-ds-base-debuginfoRed Hat:enterprise_linux:6::server |
before 0:1.2.10.2-15.el6 | 0:1.2.10.2-15.el6 |
Show 12 moreShow less
| Package | Affected | Fixed |
|---|---|---|
389-ds-base-develRed Hat:enterprise_linux:6::server |
before 0:1.2.10.2-15.el6 | 0:1.2.10.2-15.el6 |
389-ds-base-libsRed Hat:enterprise_linux:6::server |
before 0:1.2.10.2-15.el6 | 0:1.2.10.2-15.el6 |
389-ds-baseRed Hat:enterprise_linux:6::workstation |
before 0:1.2.10.2-15.el6 | 0:1.2.10.2-15.el6 |
389-ds-base-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:1.2.10.2-15.el6 | 0:1.2.10.2-15.el6 |
389-ds-base-develRed Hat:enterprise_linux:6::workstation |
before 0:1.2.10.2-15.el6 | 0:1.2.10.2-15.el6 |
389-ds-base-libsRed Hat:enterprise_linux:6::workstation |
before 0:1.2.10.2-15.el6 | 0:1.2.10.2-15.el6 |
adminutilRed Hat:directory_server:8::el5 |
before 0:1.1.8-3.el5dsrv | 0:1.1.8-3.el5dsrv |
adminutil-debuginfoRed Hat:directory_server:8::el5 |
before 0:1.1.8-3.el5dsrv | 0:1.1.8-3.el5dsrv |
adminutil-develRed Hat:directory_server:8::el5 |
before 0:1.1.8-3.el5dsrv | 0:1.1.8-3.el5dsrv |
redhat-ds-baseRed Hat:directory_server:8::el5 |
before 0:8.2.11-5.el5dsrv | 0:8.2.11-5.el5dsrv |
redhat-ds-base-debuginfoRed Hat:directory_server:8::el5 |
before 0:8.2.11-5.el5dsrv | 0:8.2.11-5.el5dsrv |
redhat-ds-base-develRed Hat:directory_server:8::el5 |
before 0:8.2.11-5.el5dsrv | 0:8.2.11-5.el5dsrv |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-0833 is a low vulnerability (CVSS 2.3) in Fedoraproject 389 Directory Server, published July 3, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.90%, the 59th percentile. Fixed in 389-ds-base 0:1.2.10.2-15.el6.
References
rhn.redhat.com/errata/RHSA-2012-0813.html
fedorahosted.org/389/ticket/162
secunia.com/advisories/49562
nvd.nist.gov/vuln/detail/CVE-2012-0833
Show 53 moreShow less
github.com/advisories/GHSA-29ch-37gp-6r87
access.redhat.com/errata/RHSA-2012:0813
docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.3_Technical_Notes/pkg-389-ds-base.html
bugzilla.redhat.com/show_bug.cgi?id=766322
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0813.json
cve.org/CVERecord?id=CVE-2012-0833