https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T01:05:23.888757+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-105703 EUVD-2026-105703 2026-10-16T01:05:23.981640+00:00 EUVD-2026-105703 https://cve.radiocsirt.org/vuln/fkie_cve-2013-1897 fkie_cve-2013-1897 2026-10-16T01:05:23.981681+00:00

The do_search function in ldap/servers/slapd/search.c in 389 Directory Server 1.2.x before 1.2.11.20 and 1.3.x before 1.3.0.5 does not properly restrict access to entries when the nsslapd-allow-anonymous-access configuration is set to rootdse and the BASE search scope is used, which allows remote attackers to obtain sensitive information outside of the rootDSE via a crafted LDAP search.

 https://cve.radiocsirt.org/vuln/ghsa-xpx8-wp93-8pmf GHSA-xpx8-wp93-8pmf 2026-10-16T01:05:23.981714+00:00

The do_search function in ldap/servers/slapd/search.c in 389 Directory Server 1.2.x before 1.2.11.20 and 1.3.x before 1.3.0.5 does not properly restrict access to entries when the nsslapd-allow-anonymous-access configuration is set to rootdse and the BASE search scope is used, which allows remote attackers to obtain sensitive information outside of the rootDSE via a crafted LDAP search.

 https://cve.radiocsirt.org/vuln/gsd-2013-1897 gsd-2013-1897 2026-10-16T01:05:23.981733+00:00 gsd-2013-1897 https://cve.radiocsirt.org/vuln/rhsa-2013:0742 RHSA-2013:0742 — Red Hat Security Advisory: 389-ds-base security and bug fix update 2026-10-16T01:05:23.981745+00:00

389-ds: unintended information exposure when rootdse is enabled

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-1897 Withdrawn: UBUNTU-CVE-2013-1897 2026-10-16T01:05:23.981765+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: 389-ds-base

The do_search function in ldap/servers/slapd/search.c in 389 Directory Server 1.2.x before 1.2.11.20 and 1.3.x before 1.3.0.5 does not properly restrict access to entries when the nsslapd-allow-anonymous-access configuration is set to rootdse and the BASE search scope is used, which allows remote attackers to obtain sensitive information outside of the rootDSE via a crafted LDAP search.