Improper Authentication in 389-ds-base - CVE-2021-3652

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU55334

Improper Authentication in 389-ds-base - CVE-2021-3652

Published: July 27, 2021


Vulnerability identifier: #VU55334
CSH Severity: Medium
CVSS v4: 6.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-3652
CWE-ID: CWE-287
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to bypass authentication process.

The vulnerability exists due to an error in the way the asterisk character is processed by the LDAP server when importing password hashes from /etc/shadow for disabled accounts. As a result of the flaw, if an LDAP admin imports such an account from a NIS or /etc/shadow database into Directory Server, any password will be valid for that account.


Affected software

389-ds-base
Arch Linux
Amazon Linux AMI
SUSE CaaS Platform
SUSE Enterprise Storage
CentOS
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Anolis OS
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Server
SUSE Linux Enterprise Module for Server Applications
389-ds-base (Red Hat package)
Red Hat Enterprise Linux Server for x86_64 - Update Services for SAP Solutions
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
389-admin
389-ds-base
389-ds
389-ds-debuginfo
389-ds-debugsource
389-ds-devel
libsvrcore0
libsvrcore0-debuginfo
python3-lib389
389-ds-base-snmp
389-ds-base-libs
389-ds-base-legacy-tools
389-ds-base-devel
389-ds-snmp
389-ds-snmp-debuginfo
lib389

How to mitigate CVE-2021-3652

Install updates from vendor's website.

389-ds-base - update to 2.0.7
389-ds-base (Red Hat package) - update to 1.3.10.2-13.el7_9
389-admin - update to 1.1.46-5.14
389-ds-base - update to 1.3.10.2-9.67
389-ds - addressed in versions 1.4.0.31~git15.8b9843b0b-150000.4.27.1, 1.4.2.16~git68.efa843752-150100.7.34.1, 1.4.3.24~git13.7b705e743-3.19.1, 1.4.4.16~git16.c1926dfc6-3.4.1
389-ds-debuginfo - addressed in versions 1.4.0.31~git15.8b9843b0b-150000.4.27.1, 1.4.2.16~git68.efa843752-150100.7.34.1, 1.4.3.24~git13.7b705e743-3.19.1, 1.4.4.16~git16.c1926dfc6-3.4.1
389-ds-debugsource - addressed in versions 1.4.0.31~git15.8b9843b0b-150000.4.27.1, 1.4.2.16~git68.efa843752-150100.7.34.1, 1.4.3.24~git13.7b705e743-3.19.1, 1.4.4.16~git16.c1926dfc6-3.4.1
389-ds-devel - addressed in versions 1.4.0.31~git15.8b9843b0b-150000.4.27.1, 1.4.2.16~git68.efa843752-150100.7.34.1, 1.4.3.24~git13.7b705e743-3.19.1, 1.4.4.16~git16.c1926dfc6-3.4.1
libsvrcore0 - addressed in versions 1.4.0.31~git15.8b9843b0b-150000.4.27.1, 1.4.2.16~git68.efa843752-150100.7.34.1, 1.4.3.24~git13.7b705e743-3.19.1, 1.4.4.16~git16.c1926dfc6-3.4.1
libsvrcore0-debuginfo - addressed in versions 1.4.0.31~git15.8b9843b0b-150000.4.27.1, 1.4.2.16~git68.efa843752-150100.7.34.1, 1.4.3.24~git13.7b705e743-3.19.1, 1.4.4.16~git16.c1926dfc6-3.4.1
python3-lib389 - addressed in versions 1.4.2.4-17, 1.4.3.16-19
389-ds-base-snmp - addressed in versions 1.4.2.4-17, 1.4.3.16-19
389-ds-base-libs - addressed in versions 1.4.2.4-17, 1.4.3.16-19
389-ds-base-legacy-tools - addressed in versions 1.4.2.4-17, 1.4.3.16-19
389-ds-base-devel - addressed in versions 1.4.2.4-17, 1.4.3.16-19
389-ds-base - addressed in versions 1.4.2.4-17, 1.4.3.16-19
389-ds-snmp - update to 1.4.2.16~git68.efa843752-150100.7.34.1
389-ds-snmp-debuginfo - update to 1.4.2.16~git68.efa843752-150100.7.34.1
lib389 - addressed in versions 1.4.2.16~git68.efa843752-150100.7.34.1, 1.4.3.24~git13.7b705e743-3.19.1, 1.4.4.16~git16.c1926dfc6-3.4.1

External References

Related Security Bulletins