CVE-2012-4450
389 Directory Server 1.2.10 does not properly update the ACL when a DN entry is moved by a modrdn...
CVE-2012-4450 is a medium vulnerability (CVSS 6.0) in Fedoraproject 389 Directory Server, published October 1, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.86%, the 79th percentile. Fixed in 389-ds-base 1.2.11.15-1.
- Severity
- 6.0 MediumCVSS 2.0, NVD
- Exploit chance
- 1.86%EPSS, 79th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
1.2.11.15-1389-ds-base +17 more
Description
389 Directory Server 1.2.10 does not properly update the ACL when a DN entry is moved by a modrdn operation, which allows remote authenticated users with certain permissions to bypass ACL restrictions and access the DN entry.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
389-ds-baseDebian:12 | before 1.2.11.15-1 | 1.2.11.15-1 |
389-ds-baseDebian:13 | before 1.2.11.15-1 | 1.2.11.15-1 |
389-ds-baseRed Hat:enterprise_linux:6::client | before 0:1.2.11.15-11.el6 | 0:1.2.11.15-11.el6 |
389-ds-base-debuginfoRed Hat:enterprise_linux:6::client | before 0:1.2.11.15-11.el6 | 0:1.2.11.15-11.el6 |
389-ds-base-develRed Hat:enterprise_linux:6::client | before 0:1.2.11.15-11.el6 | 0:1.2.11.15-11.el6 |
389-ds-base-libsRed Hat:enterprise_linux:6::client | before 0:1.2.11.15-11.el6 | 0:1.2.11.15-11.el6 |
389-ds-baseRed Hat:enterprise_linux:6::computenode | before 0:1.2.11.15-11.el6 | 0:1.2.11.15-11.el6 |
389-ds-base-debuginfoRed Hat:enterprise_linux:6::computenode | before 0:1.2.11.15-11.el6 | 0:1.2.11.15-11.el6 |
389-ds-base-develRed Hat:enterprise_linux:6::computenode | before 0:1.2.11.15-11.el6 | 0:1.2.11.15-11.el6 |
389-ds-base-libsRed Hat:enterprise_linux:6::computenode | before 0:1.2.11.15-11.el6 | 0:1.2.11.15-11.el6 |
Show 8 moreShow less
| Package | Affected | Fixed |
|---|---|---|
389-ds-baseRed Hat:enterprise_linux:6::server | before 0:1.2.11.15-11.el6 | 0:1.2.11.15-11.el6 |
389-ds-base-debuginfoRed Hat:enterprise_linux:6::server | before 0:1.2.11.15-11.el6 | 0:1.2.11.15-11.el6 |
389-ds-base-develRed Hat:enterprise_linux:6::server | before 0:1.2.11.15-11.el6 | 0:1.2.11.15-11.el6 |
389-ds-base-libsRed Hat:enterprise_linux:6::server | before 0:1.2.11.15-11.el6 | 0:1.2.11.15-11.el6 |
389-ds-baseRed Hat:enterprise_linux:6::workstation | before 0:1.2.11.15-11.el6 | 0:1.2.11.15-11.el6 |
389-ds-base-debuginfoRed Hat:enterprise_linux:6::workstation | before 0:1.2.11.15-11.el6 | 0:1.2.11.15-11.el6 |
389-ds-base-develRed Hat:enterprise_linux:6::workstation | before 0:1.2.11.15-11.el6 | 0:1.2.11.15-11.el6 |
389-ds-base-libsRed Hat:enterprise_linux:6::workstation | before 0:1.2.11.15-11.el6 | 0:1.2.11.15-11.el6 |
What each source reports
NVD Score used
389 Directory Server 1.2.10 does not properly update the ACL when a DN entry is moved by a modrdn operation, which allows remote authenticated users with certain permissions to bypass ACL restrictions and access the DN entry.
- Record
CVE-2012-4450- CVSS 2.0
- 6.0 Medium
AV:N/AC:M/Au:S/C:P/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE ListNo score
389 Directory Server 1.2.10 does not properly update the ACL when a DN entry is moved by a modrdn operation, which allows remote authenticated users with certain permissions to bypass ACL restrictions and access the DN entry.
- Record
CVE-2012-4450- Updated
- 2026-11-02
EUVDEUVD-2012-4381No score
389 Directory Server 1.2.10 does not properly update the ACL when a DN entry is moved by a modrdn operation, which allows remote authenticated users with certain permissions to bypass ACL restrictions and access the DN entry.
- Record
EUVD-2012-4381- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hxpc-5pf5-9xxgNo score
389 Directory Server 1.2.10 does not properly update the ACL when a DN entry is moved by a modrdn...
389 Directory Server 1.2.10 does not properly update the ACL when a DN entry is moved by a modrdn operation, which allows remote authenticated users with certain permissions to bypass ACL restrictions and access the DN entry.
- Record
GHSA-hxpc-5pf5-9xxg- Updated
- 2026-11-02
OSVNo score
389 Directory Server 1.2.10 does not properly update the ACL when a DN entry is moved by a modrdn operation, which allows remote authenticated users with certain permissions to bypass ACL restrictions and access the DN entry.
- Record
CVE-2012-4450- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-4450No score
389 Directory Server 1.2.10 does not properly update the ACL when a DN entry is moved by a modrdn operation, which allows remote authenticated users with certain permissions to bypass ACL restrictions and access the DN entry.
- Record
DEBIAN-CVE-2012-4450- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
bugzilla.redhat.com/show_bug.cgi?id=860772
fedorahosted.org/389/ticket/340
git.fedorahosted.org/cgit/389/ds.git/commit?id=5beb93d42efb807838c09c5fab898876876f8d09
secunia.com/advisories/50713
rhn.redhat.com/errata/RHSA-2013-0503.html
openwall.com/lists/oss-security/2012/09/26/3
Show 85 moreShow less
securityfocus.com/bid/55690
nvd.nist.gov/vuln/detail/CVE-2012-4450
github.com/advisories/GHSA-hxpc-5pf5-9xxg
security-tracker.debian.org/tracker/CVE-2012-4450
access.redhat.com/errata/RHSA-2013:0503
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0503.json
cve.org/CVERecord?id=CVE-2012-4450