Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-92hm-bx5r-2kb5
Summary389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstation 6 through 7 allows remote attackers to obtain user passwords.
Aliases
0
alias CVE-2016-5405
Fixed_packages
0
url pkg:deb/debian/389-ds-base@1.3.5.15-1?distro=trixie
purl pkg:deb/debian/389-ds-base@1.3.5.15-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/389-ds-base@1.3.5.15-1%3Fdistro=trixie
1
url pkg:deb/debian/389-ds-base@1.4.4.11-2?distro=trixie
purl pkg:deb/debian/389-ds-base@1.4.4.11-2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5mdk-bqm7-mkeu
1
vulnerability VCID-7dna-4mcn-jqd5
2
vulnerability VCID-ft29-jr9j-jbbm
3
vulnerability VCID-k27f-tsq5-73fn
4
vulnerability VCID-ud9m-jz3k-bfhm
5
vulnerability VCID-vadc-mdbp-q3g9
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/389-ds-base@1.4.4.11-2%3Fdistro=trixie
2
url pkg:deb/debian/389-ds-base@2.3.1%2Bdfsg1-1%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/389-ds-base@2.3.1%2Bdfsg1-1%2Bdeb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5mdk-bqm7-mkeu
1
vulnerability VCID-7dna-4mcn-jqd5
2
vulnerability VCID-ft29-jr9j-jbbm
3
vulnerability VCID-k27f-tsq5-73fn
4
vulnerability VCID-ud9m-jz3k-bfhm
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/389-ds-base@2.3.1%252Bdfsg1-1%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/389-ds-base@3.1.2%2Bdfsg1-1%2Bdeb13u1?distro=trixie
purl pkg:deb/debian/389-ds-base@3.1.2%2Bdfsg1-1%2Bdeb13u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/389-ds-base@3.1.2%252Bdfsg1-1%252Bdeb13u1%3Fdistro=trixie
4
url pkg:deb/debian/389-ds-base@3.1.2%2Bvendor1-2?distro=trixie
purl pkg:deb/debian/389-ds-base@3.1.2%2Bvendor1-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/389-ds-base@3.1.2%252Bvendor1-2%3Fdistro=trixie
Affected_packages
0
url pkg:rpm/redhat/389-ds-base@1.2.11.15-84?arch=el6_8
purl pkg:rpm/redhat/389-ds-base@1.2.11.15-84?arch=el6_8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-92hm-bx5r-2kb5
1
vulnerability VCID-yrgr-fu6h-ykh9
2
vulnerability VCID-zj6y-3p85-1fhg
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/389-ds-base@1.2.11.15-84%3Farch=el6_8
1
url pkg:rpm/redhat/389-ds-base@1.3.5.10-11?arch=el7
purl pkg:rpm/redhat/389-ds-base@1.3.5.10-11?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-92hm-bx5r-2kb5
1
vulnerability VCID-yrgr-fu6h-ykh9
2
vulnerability VCID-zj6y-3p85-1fhg
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/389-ds-base@1.3.5.10-11%3Farch=el7
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5405.json
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5405.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-5405
reference_id
reference_type
scores
0
value 0.00593
scoring_system epss
scoring_elements 0.69633
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-5405
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1358865
reference_id 1358865
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1358865
3
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=842121
reference_id 842121
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=842121
4
reference_url https://access.redhat.com/errata/RHSA-2016:2594
reference_id RHSA-2016:2594
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:2594
5
reference_url https://access.redhat.com/errata/RHSA-2016:2765
reference_id RHSA-2016:2765
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:2765
Weaknesses
0
cwe_id 385
name Covert Timing Channel
description Covert timing channels convey information by modulating some aspect of system behavior over time, so that the program receiving the information can observe system behavior and infer protected information.
Exploits
Severity_range_score6.8 - 6.8
Exploitability0.5
Weighted_severity6.1
Risk_score3.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-92hm-bx5r-2kb5