Every CVE Search/ Get API key

CVE-2013-4485

389 Directory Server 1.2.11.15 (aka Red Hat Directory Server before 8.2.11-14) allows remote...

4.0 MediumFix available

389 Directory Server 1.2.11.15 (aka Red Hat Directory Server before 8.2.11-14) allows remote authenticated users to cause a denial of service (crash) via multiple @ characters in a GER attribute list in a search request.

Exploit likelihood

1.99%Up 0.9 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.0

389 Directory Server 1.2.11.15 (aka Red Hat Directory Server before 8.2.11-14) allows remote authenticated users to cause a denial of service (crash) via multiple @ characters in a GER attribute list in a search request.

Record
CVE-2013-4485
CVSS 2.0
4.0 MediumAV:N/AC:L/Au:S/C:N/I:N/A:P
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

389 Directory Server 1.2.11.15 (aka Red Hat Directory Server before 8.2.11-14) allows remote authenticated users to cause a denial of service (crash) via multiple @ characters in a GER attribute list in a search request.

Record
CVE-2013-4485
Updated
2026-11-02
EUVDEUVD-2013-4350 No score

389 Directory Server 1.2.11.15 (aka Red Hat Directory Server before 8.2.11-14) allows remote authenticated users to cause a denial of service (crash) via multiple @ characters in a GER attribute list in a search request.

Record
EUVD-2013-4350
Updated
2026-11-03
GitHub AdvisoriesGHSA-jhmx-jgjc-h9h7 No score

389 Directory Server 1.2.11.15 (aka Red Hat Directory Server before 8.2.11-14) allows remote...

389 Directory Server 1.2.11.15 (aka Red Hat Directory Server before 8.2.11-14) allows remote authenticated users to cause a denial of service (crash) via multiple @ characters in a GER attribute list in a search request.

Record
GHSA-jhmx-jgjc-h9h7
Weakness
CWE-20
Updated
2026-11-02
OSV No score

389 Directory Server 1.2.11.15 (aka Red Hat Directory Server before 8.2.11-14) allows remote authenticated users to cause a denial of service (crash) via multiple @ characters in a GER attribute list in a search request.

Record
CVE-2013-4485
Updated
2026-11-02
OSVDEBIAN-CVE-2013-4485 No score

389 Directory Server 1.2.11.15 (aka Red Hat Directory Server before 8.2.11-14) allows remote authenticated users to cause a denial of service (crash) via multiple @ characters in a GER attribute list in a search request.

Record
DEBIAN-CVE-2013-4485
Updated
2026-11-02
OSVMGASA-2013-0357 No score

Updated 389-ds-base package fixes CVE-2013-4485

Updated 389-ds-base packages fix security vulnerability:

It was discovered that the 389 Directory Server did not properly handle certain Get Effective Rights (GER) search queries when the attribute list, which is a part of the query, included several names using the '@' character. An attacker able to submit search queries to the 389 Directory Server could cause it to crash (CVE-2013-4485).

Record
MGASA-2013-0357
Updated
2026-11-02
OSVUBUNTU-CVE-2013-4485 No score

389 Directory Server 1.2.11.15 (aka Red Hat Directory Server before 8.2.11-14) allows remote authenticated users to cause a denial of service (crash) via multiple @ characters in a GER attribute list in a search request.

Record
UBUNTU-CVE-2013-4485
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
389-ds-base
Debian:12
 before 1.3.2.9-1
1.3.2.9-1
389-ds-base
Debian:13
 before 1.3.2.9-1
1.3.2.9-1
389-ds-base
Mageia:3
 before 1.3.0.9-1.mga3
1.3.0.9-1.mga3
389-ds-base
Red Hat:enterprise_linux:6::client
 before 0:1.2.11.15-30.el6_5
0:1.2.11.15-30.el6_5
389-ds-base-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:1.2.11.15-30.el6_5
0:1.2.11.15-30.el6_5
389-ds-base-devel
Red Hat:enterprise_linux:6::client
 before 0:1.2.11.15-30.el6_5
0:1.2.11.15-30.el6_5
389-ds-base-libs
Red Hat:enterprise_linux:6::client
 before 0:1.2.11.15-30.el6_5
0:1.2.11.15-30.el6_5
389-ds-base
Red Hat:enterprise_linux:6::computenode
 before 0:1.2.11.15-30.el6_5
0:1.2.11.15-30.el6_5
389-ds-base-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:1.2.11.15-30.el6_5
0:1.2.11.15-30.el6_5
389-ds-base-devel
Red Hat:enterprise_linux:6::computenode
 before 0:1.2.11.15-30.el6_5
0:1.2.11.15-30.el6_5
Show 12 moreShow less
Affected packages
PackageAffectedFixed
389-ds-base-libs
Red Hat:enterprise_linux:6::computenode
 before 0:1.2.11.15-30.el6_5
0:1.2.11.15-30.el6_5
389-ds-base
Red Hat:enterprise_linux:6::server
 before 0:1.2.11.15-30.el6_5
0:1.2.11.15-30.el6_5
389-ds-base-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:1.2.11.15-30.el6_5
0:1.2.11.15-30.el6_5
389-ds-base-libs
Red Hat:enterprise_linux:6::server
 before 0:1.2.11.15-30.el6_5
0:1.2.11.15-30.el6_5
389-ds-base-devel
Red Hat:enterprise_linux:6::server
 before 0:1.2.11.15-30.el6_5
0:1.2.11.15-30.el6_5
389-ds-base
Red Hat:enterprise_linux:6::workstation
 before 0:1.2.11.15-30.el6_5
0:1.2.11.15-30.el6_5
389-ds-base-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:1.2.11.15-30.el6_5
0:1.2.11.15-30.el6_5
389-ds-base-libs
Red Hat:enterprise_linux:6::workstation
 before 0:1.2.11.15-30.el6_5
0:1.2.11.15-30.el6_5
389-ds-base-devel
Red Hat:enterprise_linux:6::workstation
 before 0:1.2.11.15-30.el6_5
0:1.2.11.15-30.el6_5
redhat-ds-base
Red Hat:directory_server:8::el5
 before 0:8.2.11-14.el5dsrv
0:8.2.11-14.el5dsrv
redhat-ds-base-debuginfo
Red Hat:directory_server:8::el5
 before 0:8.2.11-14.el5dsrv
0:8.2.11-14.el5dsrv
redhat-ds-base-devel
Red Hat:directory_server:8::el5
 before 0:8.2.11-14.el5dsrv
0:8.2.11-14.el5dsrv

History

History
RecordedChangedSources
affected
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2013-4485 is a medium vulnerability (CVSS 4.0) in Fedoraproject 389 Directory Server, published November 23, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.99%, the 80th percentile. Fixed in 389-ds-base 1.3.2.9-1.

References

Show 12 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open