Red Hat Security AdvisoryRHSA-2008:0201
redhat-ds-admin security update
Released 2008-04-15 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Directory Server 8 (for RHEL 5 Server) redhat-ds-admin-8.0.0-6.el5dsrv, redhat-ds-admin-8.0.0-6.el5dsrv.i386
Fixes 2 records
Priority MEDIUM 54
The replication monitor CGI script (repl-monitor-cgi.pl) in Red Hat Administration Server, as used by Red Hat Directory Server 8.0 EL4 and EL5, allows remote attackers to execute arbitrary commands.
CVSS 2.0HIGH 9.0· Network · Low privileges · Interaction — · EPSS 0.1402 · Published 2008-04-16 · Fixed CWE-20
Priority LOW 37
Red Hat Administration Server, as used by Red Hat Directory Server 8.0 EL4 and EL5, does not properly restrict access to CGI scripts, which allows remote attackers to perform administrative actions.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02012 · Published 2008-04-16 · Fixed CWE-264
