CVE-2015-1854

389 Directory Server before 1.3.3.10 allows attackers to bypass intended access restrictions and modify directory entries via a crafted ldapmodrdn call.

• CWE-284

• http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157069.htmlMailing List, Third Party Advisory
• http://www.securityfocus.com/bid/74392Third Party Advisory, VDB Entry
• https://access.redhat.com/errata/RHSA-2015:0895Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1209573Issue Tracking, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2018/07/msg00018.htmlMailing List, Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157069.htmlMailing List, Third Party Advisory
• http://www.securityfocus.com/bid/74392Third Party Advisory, VDB Entry
• https://access.redhat.com/errata/RHSA-2015:0895Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1209573Issue Tracking, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2018/07/msg00018.htmlMailing List, Third Party Advisory

Published

Sep 19, 2017

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-1848The pcs daemon (pcsd) in PCS 0.9.137 and earlier does not se…
• CVE-2015-1849AdvancedLdapLodinMogule in Red Hat JBoss Enterprise Applicat…
• CVE-2015-1850Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2015-1851OpenStack Cinder before 2014.1.5 (icehouse), 2014.2.x before…
• CVE-2015-1852The s3_token middleware in OpenStack keystonemiddleware befo…
• CVE-2015-1853chrony before 1.31.1 does not properly protect state variabl…6.5
• CVE-2015-1855verify_certificate_identity in the OpenSSL extension in Ruby…5.9
• CVE-2015-1856OpenStack Object Storage (Swift) before 2.3.0, when allow_ve…
• CVE-2015-1857The odl-mdsal-apidocs feature in OpenDaylight Helium allow r…5.3
• CVE-2015-1858Multiple buffer overflows in gui/image/qbmphandler.cpp in th…
• CVE-2015-1859Multiple buffer overflows in plugins/imageformats/ico/qicoha…
• CVE-2015-1860Multiple buffer overflows in gui/image/qgifhandler.cpp in th…