Red Hat Security Advisory

RHSA-2011:0293

Red Hat Directory Server security update

Released 2011-02-22 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Directory Server 8 (for RHEL 5 Server) redhat-ds-admin-8.2.1-1.el5dsrv, redhat-ds-admin-8.2.1-1.el5dsrv.i386, redhat-ds-base-8.2.4-1.el5dsrv +3

Fixes 3 records

TI-2011-00019 CVE-2011-0019 · GHSA-rxmx-rf7q-7wh5

slapd (aka ns-slapd) in 389 Directory Server 1.2.7.5 (aka Red Hat Directory Server 8.2.x…

LOW 36

slapd (aka ns-slapd) in 389 Directory Server 1.2.7.5 (aka Red Hat Directory Server 8.2.x or dirsrv) does not properly handle simple paged result searches, which allows remote attackers to cause a denial of service (daemo…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01422 Published 2011-02-23 Fixed CWE-20

TI-2011-00459 CVE-2011-0532 · GHSA-pw8c-3x98-r358

The (1) backup and restore scripts, (2) main initialization script, and (3) ldap-agent…

LOW 27

The (1) backup and restore scripts, (2) main initialization script, and (3) ldap-agent script in 389 Directory Server 1.2.x (aka Red Hat Directory Server 8.2.x) place a zero-length directory name in the LD_LIBRARY_PATH,…

CVSS 2.0MEDIUM 6.2 Local No auth Interaction — EPSS 0.00284 Published 2011-02-23 Fixed CWE-264

TI-2011-00022 CVE-2011-0022 · GHSA-89f5-968h-h37p

The setup scripts in 389 Directory Server 1.2.x (aka Red Hat Directory Server 8.2.x)…

LOW 21

The setup scripts in 389 Directory Server 1.2.x (aka Red Hat Directory Server 8.2.x), when multiple unprivileged instances are configured, use 0777 permissions for the /var/run/dirsrv directory, which allows local users…

CVSS 2.0MEDIUM 4.7 Local No auth Interaction — EPSS 0.00294 Published 2011-02-23 Fixed CWE-399