CVEvulnerability
CVE-2008-0893
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-04-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
Red Hat Administration Server, as used by Red Hat Directory Server 8.0 EL4 and EL5, does not properly restrict access to CGI scripts, which allows remote attackers to perform administrative actions.
Affected configurations
• redhat directory server 8.0
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/29761 Vendor Advisory
- http://secunia.com/advisories/29826 secunia.com
- http://www.redhat.com/support/errata/RHSA-2008-0201.html Patch
- http://www.securityfocus.com/bid/28802 www.securityfocus.com
- http://www.securitytracker.com/id?1019857 www.securitytracker.com
- https://bugzilla.redhat.com/show_bug.cgi?id=437320 bugzilla.redhat.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41843 exchange.xforce.ibmcloud.com
- https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00380.html www.redhat.com
- https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00386.html www.redhat.com
- http://secunia.com/advisories/29761 Vendor Advisory
- http://secunia.com/advisories/29826 secunia.com
- http://www.redhat.com/support/errata/RHSA-2008-0201.html Patch
- http://www.securityfocus.com/bid/28802 www.securityfocus.com
- http://www.securitytracker.com/id?1019857 www.securitytracker.com
- https://bugzilla.redhat.com/show_bug.cgi?id=437320 bugzilla.redhat.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41843 exchange.xforce.ibmcloud.com
- https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00380.html www.redhat.com
- https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00386.html www.redhat.com