CVEvulnerability
CVE-2008-0890
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-03-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
Red Hat Directory Server 7.1 before SP4 uses insecure permissions for certain directories, which allows local users to modify JAR files and execute arbitrary code via unknown vectors.
Affected configurations
• redhat directory server (<= 7.1)
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/29350 secunia.com
- http://www.redhat.com/support/errata/RHSA-2008-0173.html www.redhat.com
- http://www.securityfocus.com/bid/28204 www.securityfocus.com
- http://www.securitytracker.com/id?1019577 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41152 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/29350 secunia.com
- http://www.redhat.com/support/errata/RHSA-2008-0173.html www.redhat.com
- http://www.securityfocus.com/bid/28204 www.securityfocus.com
- http://www.securitytracker.com/id?1019577 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41152 exchange.xforce.ibmcloud.com