{"id":"CVE-2013-4283","aliases":["DEBIAN-CVE-2013-4283","EUVD-2013-4181","GHSA-w5qq-w4qc-mwpx","MGASA-2013-0263","RHSA-2013:1182","UBUNTU-CVE-2013-4283"],"status":"published","title":"ns-slapd in 389 Directory Server before 1.3.0.8 allows remote attackers to cause a denial of...","description":"ns-slapd in 389 Directory Server before 1.3.0.8 allows remote attackers to cause a denial of service (server crash) via a crafted Distinguished Name (DN) in a MOD operation request.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02427,"percentile":0.84323,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20"],"published":"2013-08-30T17:23:22Z","modified":"2026-09-01T20:03:17Z","fixes":[{"ecosystem":"Debian:12","package":"389-ds-base","fixed_in":["1.3.2.9-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"389-ds-base","fixed_in":["1.3.2.9-1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"389-ds-base","fixed_in":["0:1.2.11.15-22.el6_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"389-ds-base-debuginfo","fixed_in":["0:1.2.11.15-22.el6_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"389-ds-base-devel","fixed_in":["0:1.2.11.15-22.el6_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"389-ds-base-libs","fixed_in":["0:1.2.11.15-22.el6_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"389-ds-base","fixed_in":["0:1.2.11.15-22.el6_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"389-ds-base-debuginfo","fixed_in":["0:1.2.11.15-22.el6_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"389-ds-base-devel","fixed_in":["0:1.2.11.15-22.el6_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"389-ds-base-libs","fixed_in":["0:1.2.11.15-22.el6_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"389-ds-base","fixed_in":["0:1.2.11.15-22.el6_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"389-ds-base-debuginfo","fixed_in":["0:1.2.11.15-22.el6_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"389-ds-base-libs","fixed_in":["0:1.2.11.15-22.el6_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"389-ds-base-devel","fixed_in":["0:1.2.11.15-22.el6_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"389-ds-base","fixed_in":["0:1.2.11.15-22.el6_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"389-ds-base-debuginfo","fixed_in":["0:1.2.11.15-22.el6_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"389-ds-base-libs","fixed_in":["0:1.2.11.15-22.el6_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"389-ds-base-devel","fixed_in":["0:1.2.11.15-22.el6_4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2.9-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2.9-1"}]}]},{"source":"osv","ecosystem":"Mageia:3","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0.8-1.mga3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.11.15-22.el6_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.11.15-22.el6_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.11.15-22.el6_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.11.15-22.el6_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.11.15-22.el6_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.11.15-22.el6_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.11.15-22.el6_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.11.15-22.el6_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.11.15-22.el6_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.11.15-22.el6_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.11.15-22.el6_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.11.15-22.el6_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.11.15-22.el6_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.11.15-22.el6_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.11.15-22.el6_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.11.15-22.el6_4"}]}]}],"products":[{"vendor":"fedoraproject","product":"389_directory_server"}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2013-1182.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://directory.fedoraproject.org/wiki/Releases/1.3.0.8","tags":["x_refsource_CONFIRM","x_transferred","Patch","fix"]},{"url":"http://secunia.com/advisories/54650","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://secunia.com/advisories/54586","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=999634","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-4283","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-w5qq-w4qc-mwpx"},{"url":"https://security-tracker.debian.org/tracker/CVE-2013-4283","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2013-0263.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=10138","tags":["report"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=10889","tags":["report"]},{"url":"https://rhn.redhat.com/errata/RHSA-2013-1119.html","tags":["web"]},{"url":"https://rhn.redhat.com/errata/RHSA-2013-1182.html","tags":["web","report"]},{"url":"https://access.redhat.com/errata/RHSA-2013:1182","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1182.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-4283","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-4283","tags":["advisory","report"]},{"url":"https://ubuntu.com/security/CVE-2013-4283","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2013-4283","description":"ns-slapd in 389 Directory Server before 1.3.0.8 allows remote attackers to cause a denial of service (server crash) via a crafted Distinguished Name (DN) in a MOD operation request.","status":"published","published":"2013-09-10T19:00:00Z","modified":"2024-08-06T16:38:01.926Z","updated_at":"2026-11-02T14:34:57.869657Z"}],"euvd":[{"id":"EUVD-2013-4181","description":"ns-slapd in 389 Directory Server before 1.3.0.8 allows remote attackers to cause a denial of service (server crash) via a crafted Distinguished Name (DN) in a MOD operation request.","status":"published","published":"2013-09-10T19:00:00Z","modified":"2024-08-06T16:38:01Z","updated_at":"2026-11-03T01:56:32.70868Z"}],"ghsa":[{"id":"GHSA-w5qq-w4qc-mwpx","title":"ns-slapd in 389 Directory Server before 1.3.0.8 allows remote attackers to cause a denial of...","description":"ns-slapd in 389 Directory Server before 1.3.0.8 allows remote attackers to cause a denial of service (server crash) via a crafted Distinguished Name (DN) in a MOD operation request.","status":"published","published":"2022-05-17T05:04:53Z","modified":"2023-01-28T05:03:04Z","cwes":["CWE-20"],"updated_at":"2026-11-02T14:43:54.031093Z"}],"nvd":[{"id":"CVE-2013-4283","description":"ns-slapd in 389 Directory Server before 1.3.0.8 allows remote attackers to cause a denial of service (server crash) via a crafted Distinguished Name (DN) in a MOD operation request.","status":"published","published":"2013-09-10T19:55:11.32Z","modified":"2026-06-16T23:56:56.977Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:02:35.248411Z"}],"osv":[{"id":"CVE-2013-4283","description":"ns-slapd in 389 Directory Server before 1.3.0.8 allows remote attackers to cause a denial of service (server crash) via a crafted Distinguished Name (DN) in a MOD operation request.","status":"published","published":"2013-09-10T19:55:11Z","modified":"2026-04-16T06:25:20.654483874Z","updated_at":"2026-11-02T15:43:59.09154Z"},{"id":"DEBIAN-CVE-2013-4283","description":"ns-slapd in 389 Directory Server before 1.3.0.8 allows remote attackers to cause a denial of service (server crash) via a crafted Distinguished Name (DN) in a MOD operation request.","status":"published","published":"2013-09-10T19:55:11.32Z","modified":"2026-09-01T20:03:17.735759441Z","updated_at":"2026-11-02T15:45:25.514579Z"},{"id":"MGASA-2013-0263","title":"Updated 389-ds-base packag fixes security vulnerabilies and incorrect group usage","description":"Updated 389-ds-base packages fix security vulnerabilities:\n\nIt was discovered that the 389 Directory Server did not honor defined\nattribute access controls when evaluating search filter expressions. A\nremote attacker (with permission to query the Directory Server) could use\nthis flaw to determine the values of restricted attributes via a series of\nsearch queries with filter conditions that used restricted attributes\n(CVE-2013-2219).\n\nIt was discovered that the 389 Directory Server did not properly handle the\nreceipt of certain MOD operations with a bogus Distinguished Name (DN). A\nremote, unauthenticated attacker could use this flaw to cause the 389\nDirectory Server to crash (CVE-2013-4283).\n\nAdditionally, problems of wrong default group nobody (from upstream) as well\nas the 389-ds server not starting after a reboot have been fixed (mga#10138).\n","status":"published","published":"2013-08-30T17:23:22Z","modified":"2026-04-16T06:22:30.67114002Z","updated_at":"2026-11-02T15:49:39.121227Z"},{"id":"RHSA-2013:1182","title":"Red Hat Security Advisory: 389-ds-base security update","status":"published","published":"2024-09-15T21:04:52Z","modified":"2026-06-26T12:21:44.907913524Z","updated_at":"2026-11-02T15:53:01.993625Z"},{"id":"UBUNTU-CVE-2013-4283","description":"ns-slapd in 389 Directory Server before 1.3.0.8 allows remote attackers to cause a denial of service (server crash) via a crafted Distinguished Name (DN) in a MOD operation request.","status":"withdrawn","published":"2013-09-10T19:55:00Z","modified":"2025-07-16T07:31:20.895215Z","updated_at":"2026-11-02T15:54:07.421078Z"}]}}