Description
389 Directory Server存在拒绝服务漏洞。该漏洞是由对指定服务器端排序扩展的LDAP搜索查询的处理不当所造成的。
Red Hat 389 Directory Server Server-Side-Sort拒绝服务漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://access.redhat.com/errata/RHSA-2018:3127
https://bugzilla.redhat.com/show_bug.cgi?id=1613606
https://nvd.nist.gov/vuln/detail/cve-2018-10935
https://www.juniper.net/us/en/threatlabs/ips-signatures/detail.LDAP:REDHAT-DIRSRV-DOS.html
https://alas.aws.amazon.com/ALAS-2018-1094.html
https://www.tenable.com/plugins/nessus/118401
https://cve.yack.one/products/redhat:389-directory-server
https://www.fortiguard.com/encyclopedia/ips/46972
https://software.sonicwall.com/applications/ips/index.asp?ev=sig&sigid=13624