Test ID:	1.3.6.1.4.1.25623.1.0.120201
Category:	Amazon Linux Local Security Checks
Title:	Amazon Linux: Security Advisory (ALAS-2015-538)
Summary:	The remote host is missing an update for the '389-ds-base' package(s) announced via the ALAS-2015-538 advisory.
Description:	Summary: The remote host is missing an update for the '389-ds-base' package(s) announced via the ALAS-2015-538 advisory. Vulnerability Insight: A flaw was found in the authorization of modrdn operations. An unauthenticated attacker able to issue an ldapmodrdn call to the directory server could use this flaw to perform unauthorized modifications of entries in the directory server. Affected Software/OS: '389-ds-base' package(s) on Amazon Linux. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-1854 74392 http://www.securityfocus.com/bid/74392 FEDORA-2015-7206 http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157069.html RHSA-2015:0895 https://access.redhat.com/errata/RHSA-2015:0895 [debian-lts-announce] 20180715 [SECURITY] [DLA 1428-1] 389-ds-base security update https://lists.debian.org/debian-lts-announce/2018/07/msg00018.html https://bugzilla.redhat.com/show_bug.cgi?id=1209573
Copyright	Copyright (C) 2015 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.