CVE-2012-0833

no score yetEPSS 0.9%

The acllas__handle_group_entry function in servers/plugins/acl/acllas.c in 389 Directory Server before 1.2.10 does not properly handled access control instructions (ACIs) that use certificate groups, which allows remote authenticated LDAP users with a certificate group to cause a denial of service (infinite loop and CPU consumption) by binding to the server.

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2012-07-03
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

fedoraproject:389_directory_server

References

http://rhn.redhat.com/errata/RHSA-2012-0813.html
http://secunia.com/advisories/48035
http://secunia.com/advisories/49562
https://fedorahosted.org/389/changeset/1bbbb3e5049c1aa0650546efab87ed2f1ea59637/389-ds-base
https://fedorahosted.org/389/ticket/162

Check your stack JSON