CVE-2013-4283

ns-slapd in 389 Directory Server before 1.3.0.8 allows remote attackers to cause a denial of...

5.0 MediumFix available

ns-slapd in 389 Directory Server before 1.3.0.8 allows remote attackers to cause a denial of service (server crash) via a crafted Distinguished Name (DN) in a MOD operation request.

Exploit likelihood

2.43%Up 1.2 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

ns-slapd in 389 Directory Server before 1.3.0.8 allows remote attackers to cause a denial of service (server crash) via a crafted Distinguished Name (DN) in a MOD operation request.

Record: CVE-2013-4283
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness: CWE-20
Updated: 2026-11-02

CVE List No score

ns-slapd in 389 Directory Server before 1.3.0.8 allows remote attackers to cause a denial of service (server crash) via a crafted Distinguished Name (DN) in a MOD operation request.

Record: CVE-2013-4283
Updated: 2026-11-02

EUVDEUVD-2013-4181 No score

ns-slapd in 389 Directory Server before 1.3.0.8 allows remote attackers to cause a denial of service (server crash) via a crafted Distinguished Name (DN) in a MOD operation request.

Record: EUVD-2013-4181
Updated: 2026-11-03

GitHub AdvisoriesGHSA-w5qq-w4qc-mwpx No score

ns-slapd in 389 Directory Server before 1.3.0.8 allows remote attackers to cause a denial of...

ns-slapd in 389 Directory Server before 1.3.0.8 allows remote attackers to cause a denial of service (server crash) via a crafted Distinguished Name (DN) in a MOD operation request.

Record: GHSA-w5qq-w4qc-mwpx
Weakness: CWE-20
Updated: 2026-11-02

OSV No score

ns-slapd in 389 Directory Server before 1.3.0.8 allows remote attackers to cause a denial of service (server crash) via a crafted Distinguished Name (DN) in a MOD operation request.

Record: CVE-2013-4283
Updated: 2026-11-02

OSVDEBIAN-CVE-2013-4283 No score

ns-slapd in 389 Directory Server before 1.3.0.8 allows remote attackers to cause a denial of service (server crash) via a crafted Distinguished Name (DN) in a MOD operation request.

Record: DEBIAN-CVE-2013-4283
Updated: 2026-11-02

OSVMGASA-2013-0263 No score

Updated 389-ds-base packag fixes security vulnerabilies and incorrect group usage

Updated 389-ds-base packages fix security vulnerabilities:

It was discovered that the 389 Directory Server did not honor defined attribute access controls when evaluating search filter expressions. A remote attacker (with permission to query the Directory Server) could use this flaw to determine the values of restricted attributes via a series of search queries with filter conditions that used restricted attributes (CVE-2013-2219).

It was discovered that the 389 Directory Server did not properly handle the receipt of certain MOD operations with a bogus Distinguished Name (DN). A remote, unauthenticated attacker could use this flaw to cause the 389 Directory Server to crash (CVE-2013-4283).

Additionally, problems of wrong default group nobody (from upstream) as well as the 389-ds server not starting after a reboot have been fixed (mga#10138).

Record: MGASA-2013-0263
Updated: 2026-11-02

OSVUBUNTU-CVE-2013-4283 No score

ns-slapd in 389 Directory Server before 1.3.0.8 allows remote attackers to cause a denial of service (server crash) via a crafted Distinguished Name (DN) in a MOD operation request.

Record: UBUNTU-CVE-2013-4283
Updated: 2026-11-02

Affected products

fedoraproject 389 directory server

Affected packages

Affected packages
Package	Affected	Fixed
`389-ds-base` Debian:12	before 1.3.2.9-1	1.3.2.9-1
`389-ds-base` Debian:13	before 1.3.2.9-1	1.3.2.9-1
`389-ds-base` Mageia:3 From an advisory covering 2 CVEs	before 1.3.0.8-1.mga3	1.3.0.8-1.mga3
`389-ds-base` Red Hat:enterprise_linux:6::client	before 0:1.2.11.15-22.el6_4	0:1.2.11.15-22.el6_4
`389-ds-base-debuginfo` Red Hat:enterprise_linux:6::client	before 0:1.2.11.15-22.el6_4	0:1.2.11.15-22.el6_4
`389-ds-base-devel` Red Hat:enterprise_linux:6::client	before 0:1.2.11.15-22.el6_4	0:1.2.11.15-22.el6_4
`389-ds-base-libs` Red Hat:enterprise_linux:6::client	before 0:1.2.11.15-22.el6_4	0:1.2.11.15-22.el6_4
`389-ds-base` Red Hat:enterprise_linux:6::computenode	before 0:1.2.11.15-22.el6_4	0:1.2.11.15-22.el6_4
`389-ds-base-debuginfo` Red Hat:enterprise_linux:6::computenode	before 0:1.2.11.15-22.el6_4	0:1.2.11.15-22.el6_4
`389-ds-base-devel` Red Hat:enterprise_linux:6::computenode	before 0:1.2.11.15-22.el6_4	0:1.2.11.15-22.el6_4

Show 9 moreShow less

Affected packages
Package	Affected	Fixed
`389-ds-base-libs` Red Hat:enterprise_linux:6::computenode	before 0:1.2.11.15-22.el6_4	0:1.2.11.15-22.el6_4
`389-ds-base` Red Hat:enterprise_linux:6::server	before 0:1.2.11.15-22.el6_4	0:1.2.11.15-22.el6_4
`389-ds-base-debuginfo` Red Hat:enterprise_linux:6::server	before 0:1.2.11.15-22.el6_4	0:1.2.11.15-22.el6_4
`389-ds-base-libs` Red Hat:enterprise_linux:6::server	before 0:1.2.11.15-22.el6_4	0:1.2.11.15-22.el6_4
`389-ds-base-devel` Red Hat:enterprise_linux:6::server	before 0:1.2.11.15-22.el6_4	0:1.2.11.15-22.el6_4
`389-ds-base` Red Hat:enterprise_linux:6::workstation	before 0:1.2.11.15-22.el6_4	0:1.2.11.15-22.el6_4
`389-ds-base-debuginfo` Red Hat:enterprise_linux:6::workstation	before 0:1.2.11.15-22.el6_4	0:1.2.11.15-22.el6_4
`389-ds-base-libs` Red Hat:enterprise_linux:6::workstation	before 0:1.2.11.15-22.el6_4	0:1.2.11.15-22.el6_4
`389-ds-base-devel` Red Hat:enterprise_linux:6::workstation	before 0:1.2.11.15-22.el6_4	0:1.2.11.15-22.el6_4

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	affected
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2013-4283 is a medium vulnerability (CVSS 5.0) in Fedoraproject 389 Directory Server, published August 30, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.43%, the 84th percentile. Fixed in 389-ds-base 1.3.2.9-1.

References

Show 12 moreShow less