Red Hat Security AdvisoryRHSA-2008:0173
Red Hat Directory Server 7.1 Service Pack 4 security update
Released 2008-03-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHEL 4 Directory Server AS redhat-ds-7.1SP4-7.RHEL4, redhat-ds-7.1SP4-7.RHEL4.i386
- RHEL 4 Directory Server ES redhat-ds-7.1SP4-7.RHEL4, redhat-ds-7.1SP4-7.RHEL4.i386
- Red Hat Directory Server 7.1 (for AS v. 3) redhat-ds-7.1SP4-7.RHEL3, redhat-ds-7.1SP4-7.RHEL3.i386
- Red Hat Directory Server 7.1 (for ES v. 3) redhat-ds-7.1SP4-7.RHEL3, redhat-ds-7.1SP4-7.RHEL3.i386
Fixes 1 record
Priority LOW 21
Red Hat Directory Server 7.1 before SP4 uses insecure permissions for certain directories, which allows local users to modify JAR files and execute arbitrary code via unknown vectors.
CVSS 2.0MEDIUM 4.6· Local · No auth · Interaction — · EPSS 0.00374 · Published 2008-03-12 · Fixed CWE-264
