| Package | Affected versions | Patched versions |
|---|---|---|
| 389 directory server | < 1.2.7.1 | 1.2.7.1 |
| hp-ux directory server | < b.08.10.03 | b.08.10.03 |
| directory server | = 8.0 | |
| redhat directory server | < b.08.00.02 | b.08.00.02 |
389 Directory Server before 1.2.7.1 (aka Red Hat Directory Server 8.2) and HP-UX Directory Server before B.08.10.03, when audit logging is enabled, logs the Directory Manager password (nsslapd-rootpw) in cleartext when changing cn=config:nsslapd-rootpw, which might allow local users to obtain sensitive information by reading the log.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free