CVE-2016-5405
389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux...
9.8 CriticalFix available
CVE-2016-5405 is a critical vulnerability (CVSS 9.8) in Redhat Enterprise Linux Desktop, published June 8, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.06%, the 87th percentile. Fixed in 389-ds-base 1.3.5.15-1.
- Severity
- 9.8 CriticalCVSS 3.0, NVD
- Exploit chance
- 3.06%EPSS, 87th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
1.3.5.15-1389-ds-base +37 more
Description
389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstation 6 through 7 allows remote attackers to obtain user passwords.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
3.06%Up 1.8 points since Feb 4, 2022
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
389-ds-baseDebian:12 | before 1.3.5.15-1 | 1.3.5.15-1 |
389-ds-baseDebian:13 | before 1.3.5.15-1 | 1.3.5.15-1 |
389-ds-baseRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs | before 0:1.3.5.10-11.el7 | 0:1.3.5.10-11.el7 |
389-ds-base-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs | before 0:1.3.5.10-11.el7 | 0:1.3.5.10-11.el7 |
389-ds-base-develRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs | before 0:1.3.5.10-11.el7 | 0:1.3.5.10-11.el7 |
389-ds-base-libsRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs | before 0:1.3.5.10-11.el7 | 0:1.3.5.10-11.el7 |
389-ds-base-snmpRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs | before 0:1.3.5.10-11.el7 | 0:1.3.5.10-11.el7 |
389-ds-baseRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs | before 0:1.3.5.10-11.el7 | 0:1.3.5.10-11.el7 |
389-ds-base-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs | before 0:1.3.5.10-11.el7 | 0:1.3.5.10-11.el7 |
389-ds-base-develRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs | before 0:1.3.5.10-11.el7 | 0:1.3.5.10-11.el7 |
Show 28 moreShow less
| Package | Affected | Fixed |
|---|---|---|
389-ds-base-libsRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs | before 0:1.3.5.10-11.el7 | 0:1.3.5.10-11.el7 |
389-ds-base-snmpRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs | before 0:1.3.5.10-11.el7 | 0:1.3.5.10-11.el7 |
389-ds-base-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs | before 0:1.3.5.10-11.el7 | 0:1.3.5.10-11.el7 |
389-ds-base-develRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs | before 0:1.3.5.10-11.el7 | 0:1.3.5.10-11.el7 |
389-ds-base-snmpRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs | before 0:1.3.5.10-11.el7 | 0:1.3.5.10-11.el7 |
389-ds-baseRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs | before 0:1.3.5.10-11.el7 | 0:1.3.5.10-11.el7 |
389-ds-base-libsRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs | before 0:1.3.5.10-11.el7 | 0:1.3.5.10-11.el7 |
389-ds-base-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs | before 0:1.3.5.10-11.el7 | 0:1.3.5.10-11.el7 |
389-ds-base-develRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs | before 0:1.3.5.10-11.el7 | 0:1.3.5.10-11.el7 |
389-ds-base-snmpRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs | before 0:1.3.5.10-11.el7 | 0:1.3.5.10-11.el7 |
389-ds-baseRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs | before 0:1.3.5.10-11.el7 | 0:1.3.5.10-11.el7 |
389-ds-base-libsRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs | before 0:1.3.5.10-11.el7 | 0:1.3.5.10-11.el7 |
389-ds-baseRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs | before 0:1.2.11.15-84.el6_8 | 0:1.2.11.15-84.el6_8 |
389-ds-base-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs | before 0:1.2.11.15-84.el6_8 | 0:1.2.11.15-84.el6_8 |
389-ds-base-develRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs | before 0:1.2.11.15-84.el6_8 | 0:1.2.11.15-84.el6_8 |
389-ds-base-libsRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs | before 0:1.2.11.15-84.el6_8 | 0:1.2.11.15-84.el6_8 |
389-ds-baseRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs | before 0:1.2.11.15-84.el6_8 | 0:1.2.11.15-84.el6_8 |
389-ds-base-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs | before 0:1.2.11.15-84.el6_8 | 0:1.2.11.15-84.el6_8 |
389-ds-base-develRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs | before 0:1.2.11.15-84.el6_8 | 0:1.2.11.15-84.el6_8 |
389-ds-base-libsRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs | before 0:1.2.11.15-84.el6_8 | 0:1.2.11.15-84.el6_8 |
389-ds-baseRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs | before 0:1.2.11.15-84.el6_8 | 0:1.2.11.15-84.el6_8 |
389-ds-base-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs | before 0:1.2.11.15-84.el6_8 | 0:1.2.11.15-84.el6_8 |
389-ds-base-libsRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs | before 0:1.2.11.15-84.el6_8 | 0:1.2.11.15-84.el6_8 |
389-ds-base-develRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs | before 0:1.2.11.15-84.el6_8 | 0:1.2.11.15-84.el6_8 |
389-ds-baseRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs | before 0:1.2.11.15-84.el6_8 | 0:1.2.11.15-84.el6_8 |
389-ds-base-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs | before 0:1.2.11.15-84.el6_8 | 0:1.2.11.15-84.el6_8 |
389-ds-base-libsRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs | before 0:1.2.11.15-84.el6_8 | 0:1.2.11.15-84.el6_8 |
389-ds-base-develRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs | before 0:1.2.11.15-84.el6_8 | 0:1.2.11.15-84.el6_8 |
What each source reports
NVD Score used
389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstation 6 through 7 allows remote attackers to obtain user passwords.
- Record
CVE-2016-5405- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-199
- Updated
- 2026-11-02
CVE ListNo score
389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstation 6 through 7 allows remote attackers to obtain user passwords.
- Record
CVE-2016-5405- Updated
- 2026-11-02
EUVDEUVD-2016-6350No score
389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstation 6 through 7 allows remote attackers to obtain user passwords.
- Record
EUVD-2016-6350- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3mg8-mw7w-wg96
389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux...
389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstation 6 through 7 allows remote attackers to obtain user passwords.
- Record
GHSA-3mg8-mw7w-wg96- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSV
389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstation 6 through 7 allows remote attackers to obtain user passwords.
- Record
CVE-2016-5405- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2016-5405
389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstation 6 through 7 allows remote attackers to obtain user passwords.
- Record
DEBIAN-CVE-2016-5405- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2016:2594
Red Hat Security Advisory: 389-ds-base security, bug fix, and enhancement update
- Record
RHSA-2016:2594- CVSS 3.0
- 6.8 Medium
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N - Updated
- 2026-11-02
OSVRHSA-2016:2765
Red Hat Security Advisory: 389-ds-base security, bug fix, and enhancement update
- Record
RHSA-2016:2765- CVSS 3.0
- 6.8 Medium
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N - Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
bugzilla.redhat.com/show_bug.cgi?id=1358865
rhn.redhat.com/errata/RHSA-2016-2594.html
securityfocus.com/bid/93884
nvd.nist.gov/vuln/detail/CVE-2016-5405
access.redhat.com/errata/RHSA-2016:2594
Show 119 moreShow less
github.com/advisories/GHSA-3mg8-mw7w-wg96
security-tracker.debian.org/tracker/CVE-2016-5405
security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2594.json
cve.org/CVERecord?id=CVE-2016-4992