CVE-2016-4992

389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstation 6 through 7 allows remote attackers to infer the existence of RDN component objects.

• CWE-200

• http://rhn.redhat.com/errata/RHSA-2016-2594.htmlVendor Advisory
• http://rhn.redhat.com/errata/RHSA-2016-2765.htmlVendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1347760Issue Tracking, Vendor Advisory
• https://github.com/389ds/389-ds-base/commit/0b932d4b926d46ac5060f02617330dc444e06da1
• http://rhn.redhat.com/errata/RHSA-2016-2594.htmlVendor Advisory
• http://rhn.redhat.com/errata/RHSA-2016-2765.htmlVendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1347760Issue Tracking, Vendor Advisory
• https://github.com/389ds/389-ds-base/commit/0b932d4b926d46ac5060f02617330dc444e06da1

Published

Jun 8, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-4986Directory traversal vulnerability in the TAP plugin before 1…7.5
• CVE-2016-4987Directory traversal vulnerability in the Image Gallery plugi…6.5
• CVE-2016-4988Cross-site scripting (XSS) vulnerability in the Build Failur…6.1
• CVE-2016-4989setroubleshoot allows local users to bypass an intended cont…
• CVE-2016-4990Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2016-4991Input passed to the Pdf() function is shell escaped and pass…9.8
• CVE-2016-4993CRLF injection vulnerability in the Undertow web server in W…
• CVE-2016-4994Use-after-free vulnerability in the xcf_load_image function …7.8
• CVE-2016-4995Foreman before 1.11.4 and 1.12.x before 1.12.1 does not prop…
• CVE-2016-4996discovery-debug in Foreman before 6.2 when the ssh service h…
• CVE-2016-4997The compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsoc…7.8
• CVE-2016-4998The IPT_SO_SET_REPLACE setsockopt implementation in the netf…