Every CVE Search/ Get API key

CVE-2016-5405

389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux...

9.8 CriticalFix available

389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstation 6 through 7 allows remote attackers to obtain user passwords.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

3.06%Up 1.8 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 9.8

389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstation 6 through 7 allows remote attackers to obtain user passwords.

Record
CVE-2016-5405
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness
CWE-199
Updated
2026-11-02
CVE List No score

389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstation 6 through 7 allows remote attackers to obtain user passwords.

Record
CVE-2016-5405
Updated
2026-11-02
EUVDEUVD-2016-6350 No score

389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstation 6 through 7 allows remote attackers to obtain user passwords.

Record
EUVD-2016-6350
Updated
2026-11-03
GitHub AdvisoriesGHSA-3mg8-mw7w-wg96 9.8

389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux...

389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstation 6 through 7 allows remote attackers to obtain user passwords.

Record
GHSA-3mg8-mw7w-wg96
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 9.8

389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstation 6 through 7 allows remote attackers to obtain user passwords.

Record
CVE-2016-5405
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2016-5405 9.8

389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstation 6 through 7 allows remote attackers to obtain user passwords.

Record
DEBIAN-CVE-2016-5405
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2016:2594 6.8

Red Hat Security Advisory: 389-ds-base security, bug fix, and enhancement update

Record
RHSA-2016:2594
CVSS 3.0
6.8 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2016:2765 6.8

Red Hat Security Advisory: 389-ds-base security, bug fix, and enhancement update

Record
RHSA-2016:2765
CVSS 3.0
6.8 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
389-ds-base
Debian:12
 before 1.3.5.15-1
1.3.5.15-1
389-ds-base
Debian:13
 before 1.3.5.15-1
1.3.5.15-1
389-ds-base
Red Hat:enterprise_linux:7::client
 before 0:1.3.5.10-11.el7
0:1.3.5.10-11.el7
389-ds-base-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:1.3.5.10-11.el7
0:1.3.5.10-11.el7
389-ds-base-devel
Red Hat:enterprise_linux:7::client
 before 0:1.3.5.10-11.el7
0:1.3.5.10-11.el7
389-ds-base-libs
Red Hat:enterprise_linux:7::client
 before 0:1.3.5.10-11.el7
0:1.3.5.10-11.el7
389-ds-base-snmp
Red Hat:enterprise_linux:7::client
 before 0:1.3.5.10-11.el7
0:1.3.5.10-11.el7
389-ds-base
Red Hat:enterprise_linux:7::computenode
 before 0:1.3.5.10-11.el7
0:1.3.5.10-11.el7
389-ds-base-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 0:1.3.5.10-11.el7
0:1.3.5.10-11.el7
389-ds-base-devel
Red Hat:enterprise_linux:7::computenode
 before 0:1.3.5.10-11.el7
0:1.3.5.10-11.el7
Show 28 moreShow less
Affected packages
PackageAffectedFixed
389-ds-base-libs
Red Hat:enterprise_linux:7::computenode
 before 0:1.3.5.10-11.el7
0:1.3.5.10-11.el7
389-ds-base-snmp
Red Hat:enterprise_linux:7::computenode
 before 0:1.3.5.10-11.el7
0:1.3.5.10-11.el7
389-ds-base-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:1.3.5.10-11.el7
0:1.3.5.10-11.el7
389-ds-base-devel
Red Hat:enterprise_linux:7::server
 before 0:1.3.5.10-11.el7
0:1.3.5.10-11.el7
389-ds-base-snmp
Red Hat:enterprise_linux:7::server
 before 0:1.3.5.10-11.el7
0:1.3.5.10-11.el7
389-ds-base
Red Hat:enterprise_linux:7::server
 before 0:1.3.5.10-11.el7
0:1.3.5.10-11.el7
389-ds-base-libs
Red Hat:enterprise_linux:7::server
 before 0:1.3.5.10-11.el7
0:1.3.5.10-11.el7
389-ds-base-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:1.3.5.10-11.el7
0:1.3.5.10-11.el7
389-ds-base-devel
Red Hat:enterprise_linux:7::workstation
 before 0:1.3.5.10-11.el7
0:1.3.5.10-11.el7
389-ds-base-snmp
Red Hat:enterprise_linux:7::workstation
 before 0:1.3.5.10-11.el7
0:1.3.5.10-11.el7
389-ds-base
Red Hat:enterprise_linux:7::workstation
 before 0:1.3.5.10-11.el7
0:1.3.5.10-11.el7
389-ds-base-libs
Red Hat:enterprise_linux:7::workstation
 before 0:1.3.5.10-11.el7
0:1.3.5.10-11.el7
389-ds-base
Red Hat:enterprise_linux:6::client
 before 0:1.2.11.15-84.el6_8
0:1.2.11.15-84.el6_8
389-ds-base-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:1.2.11.15-84.el6_8
0:1.2.11.15-84.el6_8
389-ds-base-devel
Red Hat:enterprise_linux:6::client
 before 0:1.2.11.15-84.el6_8
0:1.2.11.15-84.el6_8
389-ds-base-libs
Red Hat:enterprise_linux:6::client
 before 0:1.2.11.15-84.el6_8
0:1.2.11.15-84.el6_8
389-ds-base
Red Hat:enterprise_linux:6::computenode
 before 0:1.2.11.15-84.el6_8
0:1.2.11.15-84.el6_8
389-ds-base-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:1.2.11.15-84.el6_8
0:1.2.11.15-84.el6_8
389-ds-base-devel
Red Hat:enterprise_linux:6::computenode
 before 0:1.2.11.15-84.el6_8
0:1.2.11.15-84.el6_8
389-ds-base-libs
Red Hat:enterprise_linux:6::computenode
 before 0:1.2.11.15-84.el6_8
0:1.2.11.15-84.el6_8
389-ds-base
Red Hat:enterprise_linux:6::server
 before 0:1.2.11.15-84.el6_8
0:1.2.11.15-84.el6_8
389-ds-base-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:1.2.11.15-84.el6_8
0:1.2.11.15-84.el6_8
389-ds-base-libs
Red Hat:enterprise_linux:6::server
 before 0:1.2.11.15-84.el6_8
0:1.2.11.15-84.el6_8
389-ds-base-devel
Red Hat:enterprise_linux:6::server
 before 0:1.2.11.15-84.el6_8
0:1.2.11.15-84.el6_8
389-ds-base
Red Hat:enterprise_linux:6::workstation
 before 0:1.2.11.15-84.el6_8
0:1.2.11.15-84.el6_8
389-ds-base-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:1.2.11.15-84.el6_8
0:1.2.11.15-84.el6_8
389-ds-base-libs
Red Hat:enterprise_linux:6::workstation
 before 0:1.2.11.15-84.el6_8
0:1.2.11.15-84.el6_8
389-ds-base-devel
Red Hat:enterprise_linux:6::workstation
 before 0:1.2.11.15-84.el6_8
0:1.2.11.15-84.el6_8

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2016-5405 is a critical vulnerability (CVSS 9.8) in Redhat Enterprise Linux Desktop, published June 8, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.06%, the 87th percentile. Fixed in 389-ds-base 1.3.5.15-1.

References

Show 119 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open