Red Hat Security Advisory

RHSA-2008:0596

Red Hat Directory Server 7.1 Service Pack 7 security update

Released 2008-08-27 · Red Hat rating Critical · View on Red Hat →

Fixed in

RHEL 4 Directory Server AS redhat-ds-7.1SP7-14.RHEL4, redhat-ds-7.1SP7-14.RHEL4.i386
RHEL 4 Directory Server ES redhat-ds-7.1SP7-14.RHEL4, redhat-ds-7.1SP7-14.RHEL4.i386
Red Hat Directory Server 7.1 (for AS v. 3) redhat-ds-7.1SP7-14.RHEL3, redhat-ds-7.1SP7-14.RHEL3.i386
Red Hat Directory Server 7.1 (for ES v. 3) redhat-ds-7.1SP7-14.RHEL3, redhat-ds-7.1SP7-14.RHEL3.i386

Fixes 4 records

TI-2008-02802 CVE-2008-2928 · GHSA-fprm-74q4-pj4w

Multiple buffer overflows in the adminutil library in CGI applications in Red Hat…

MEDIUM 52

Multiple buffer overflows in the adminutil library in CGI applications in Red Hat Directory Server 7.1 before SP7 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06643 Published 2008-08-29 Fixed CWE-119

TI-2008-02804 CVE-2008-2930 · GHSA-622c-3525-jxfp

Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory…

MEDIUM 41

Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory Server 1.1.1 allow remote attackers to cause a denial of service (CPU consumption and search outage) via crafted LDAP search reque…

CVSS 2.0HIGH 7.1 Network No auth Interaction — EPSS 0.06555 Published 2008-08-29 Fixed CWE-399

TI-2008-03145 CVE-2008-3283 · GHSA-vxv8-22w3-3cgm

Multiple memory leaks in Red Hat Directory Server 7.1 before SP7, Red Hat Directory…

LOW 39

Multiple memory leaks in Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory Server 1.1.1 and earlier allow remote attackers to cause a denial of service (memory consumption) via vec…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.02854 Published 2008-08-29 Fixed CWE-399

TI-2008-02803 CVE-2008-2929 · GHSA-p2p9-vhrp-wv8p

Multiple cross-site scripting (XSS) vulnerabilities in the adminutil library in the…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in the adminutil library in the Directory Server Administration Express and Directory Server Gateway (DSGW) web interface in Red Hat Directory Server 7.1 before SP7 and…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.017 Published 2008-08-29 Fixed CWE-79