Total vulnerabilities in the database
389 Directory Server before 1.2.7.1 (aka Red Hat Directory Server 8.2) and HP-UX Directory Server before B.08.10.03, when audit logging is enabled, logs the Directory Manager password (nsslapd-rootpw) in cleartext when changing cn=config:nsslapd-rootpw, which might allow local users to obtain sensitive information by reading the log.
| Software | From | Fixed in |
|---|---|---|
| hp / hp-ux_directory_server | - | b.08.10.03 |
| redhat / redhat_directory_server | - | b.08.00.02 |
| fedoraproject / 389_directory_server | - | 1.2.7.1 |
| redhat / directory_server | 8.0 | 8.0.x |