CVE-2008-2930

Published: Aug 29, 2008Modified: Apr 23, 2026

7.1

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Exploitability: 8.6 / Impact: 6.9

Source: NVD

Description

Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory Server 1.1.1 allow remote attackers to cause a denial of service (CPU consumption and search outage) via crafted LDAP search requests with patterns, related to a single-threaded regular-expression subsystem.

Affected (8)

Products: Fedora: Directory Server · Redhat: Directory Server

1 product

Directory Server

1 product

Directory Server

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Fedora Directory Server	Version 1.1.1
Redhat Directory Server	Version 7.1 sp1
Redhat Directory Server	Version 7.1 sp2
Redhat Directory Server	Version 7.1 sp3
Redhat Directory Server	Version 7.1 sp4
Redhat Directory Server	Version 7.1 sp5
Redhat Directory Server	Version 7.1 sp6
Redhat Directory Server	Version 8.0

Related CWEs

References (34)

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01532861

Source: secalert@redhat.com

http://secunia.com/advisories/31565

Source: secalert@redhat.com

http://secunia.com/advisories/31627

Source: secalert@redhat.com

http://secunia.com/advisories/31702

Source: secalert@redhat.com

http://secunia.com/advisories/31867

Source: secalert@redhat.com

http://securitytracker.com/id?1020773

Source: secalert@redhat.com

http://www.redhat.com/docs/manuals/dir-server/release-notes/7.1SP7/index.html

Source: secalert@redhat.com

Patch

http://www.redhat.com/support/errata/RHSA-2008-0602.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2008-0858.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/30871

Source: secalert@redhat.com

Patch

http://www.vupen.com/english/advisories/2008/2480

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=454065

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/44733

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6078

Source: secalert@redhat.com

https://rhn.redhat.com/errata/RHSA-2008-0596.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00521.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00708.html

Source: secalert@redhat.com

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01532861

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/31565

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/31627

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/31702

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/31867

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1020773

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/docs/manuals/dir-server/release-notes/7.1SP7/index.html

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.redhat.com/support/errata/RHSA-2008-0602.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2008-0858.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/30871

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.vupen.com/english/advisories/2008/2480

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=454065

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/44733

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6078

Source: af854a3a-2127-422b-91ae-364da2661108

https://rhn.redhat.com/errata/RHSA-2008-0596.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00521.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00708.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.