CVE-2012-4450

389 Directory Server 1.2.10 does not properly update the ACL when a DN entry is moved by a modrdn...

6.0 MediumFix available

389 Directory Server 1.2.10 does not properly update the ACL when a DN entry is moved by a modrdn operation, which allows remote authenticated users with certain permissions to bypass ACL restrictions and access the DN entry.

Exploit likelihood

1.86%Up 0.5 points since Feb 4, 2022

What each source reports

NVD Score used 6.0

Record: CVE-2012-4450
CVSS 2.0: 6.0 MediumAV:N/AC:M/Au:S/C:P/I:P/A:P
Weakness: CWE-264
Updated: 2026-11-02

CVE List No score

Record: CVE-2012-4450
Updated: 2026-11-02

EUVDEUVD-2012-4381 No score

Record: EUVD-2012-4381
Updated: 2026-11-03

GitHub AdvisoriesGHSA-hxpc-5pf5-9xxg No score

389 Directory Server 1.2.10 does not properly update the ACL when a DN entry is moved by a modrdn...

Record: GHSA-hxpc-5pf5-9xxg
Updated: 2026-11-02

OSV No score

Record: CVE-2012-4450
Updated: 2026-11-02

OSVDEBIAN-CVE-2012-4450 No score

Record: DEBIAN-CVE-2012-4450
Updated: 2026-11-02

Affected products

fedoraproject 389 directory server

Affected packages

Affected packages
Package	Affected	Fixed
`389-ds-base` Debian:12	before 1.2.11.15-1	1.2.11.15-1
`389-ds-base` Debian:13	before 1.2.11.15-1	1.2.11.15-1
`389-ds-base` Red Hat:enterprise_linux:6::client	before 0:1.2.11.15-11.el6	0:1.2.11.15-11.el6
`389-ds-base-debuginfo` Red Hat:enterprise_linux:6::client	before 0:1.2.11.15-11.el6	0:1.2.11.15-11.el6
`389-ds-base-devel` Red Hat:enterprise_linux:6::client	before 0:1.2.11.15-11.el6	0:1.2.11.15-11.el6
`389-ds-base-libs` Red Hat:enterprise_linux:6::client	before 0:1.2.11.15-11.el6	0:1.2.11.15-11.el6
`389-ds-base` Red Hat:enterprise_linux:6::computenode	before 0:1.2.11.15-11.el6	0:1.2.11.15-11.el6
`389-ds-base-debuginfo` Red Hat:enterprise_linux:6::computenode	before 0:1.2.11.15-11.el6	0:1.2.11.15-11.el6
`389-ds-base-devel` Red Hat:enterprise_linux:6::computenode	before 0:1.2.11.15-11.el6	0:1.2.11.15-11.el6
`389-ds-base-libs` Red Hat:enterprise_linux:6::computenode	before 0:1.2.11.15-11.el6	0:1.2.11.15-11.el6

Show 8 moreShow less

Affected packages
Package	Affected	Fixed
`389-ds-base` Red Hat:enterprise_linux:6::server	before 0:1.2.11.15-11.el6	0:1.2.11.15-11.el6
`389-ds-base-debuginfo` Red Hat:enterprise_linux:6::server	before 0:1.2.11.15-11.el6	0:1.2.11.15-11.el6
`389-ds-base-devel` Red Hat:enterprise_linux:6::server	before 0:1.2.11.15-11.el6	0:1.2.11.15-11.el6
`389-ds-base-libs` Red Hat:enterprise_linux:6::server	before 0:1.2.11.15-11.el6	0:1.2.11.15-11.el6
`389-ds-base` Red Hat:enterprise_linux:6::workstation	before 0:1.2.11.15-11.el6	0:1.2.11.15-11.el6
`389-ds-base-debuginfo` Red Hat:enterprise_linux:6::workstation	before 0:1.2.11.15-11.el6	0:1.2.11.15-11.el6
`389-ds-base-devel` Red Hat:enterprise_linux:6::workstation	before 0:1.2.11.15-11.el6	0:1.2.11.15-11.el6
`389-ds-base-libs` Red Hat:enterprise_linux:6::workstation	before 0:1.2.11.15-11.el6	0:1.2.11.15-11.el6

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-4450 is a medium vulnerability (CVSS 6.0) in Fedoraproject 389 Directory Server, published October 1, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.86%, the 79th percentile. Fixed in 389-ds-base 1.2.11.15-1.

References

Show 85 moreShow less