1. Home
  2. CVE Database
  3. CVE-2010-4746
MEDIUM · 5.0

CVE-2010-4746

Multiple memory leaks in the normalization functionality in 389 Directory Server before 1.2.7.5 allow remote attackers to cause a denial of service (memory consumption) via "badly behaved applications...

Vulnerability Description

Multiple memory leaks in the normalization functionality in 389 Directory Server before 1.2.7.5 allow remote attackers to cause a denial of service (memory consumption) via "badly behaved applications," related to (1) Slapi_Attr mishandling in the DN normalization code and (2) pointer mishandling in the syntax normalization code, a different issue than CVE-2011-0019.

CVSS Score

5.0

MEDIUM

AV:N/AC:L/Au:N/C:N/I:N/A:P
Confidentiality
NONE
Integrity
NONE
Availability
PARTIAL

Affected Products

VendorProductVersions
Fedoraproject389 Directory Server<= 1.2.7

Related Weaknesses (CWE)

CWE-399

References

FAQ

What is CVE-2010-4746?

CVE-2010-4746 is a vulnerability with a CVSS score of 5.0 (MEDIUM). Multiple memory leaks in the normalization functionality in 389 Directory Server before 1.2.7.5 allow remote attackers to cause a denial of service (memory consumption) via "badly behaved applications...

How severe is CVE-2010-4746?

CVE-2010-4746 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2010-4746?

Check the references section above for vendor advisories and patch information. Affected products include: Fedoraproject 389 Directory Server.