PT-2011-2017 · Red Hat · 389 Directory Server
Vincent Danen
·
Publicado
2011-02-23
·
Atualizado
2011-03-31
·
CVE-2011-0019
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
389 Directory Server version 1.2.7.5
Description
The issue is related to the handling of simple paged result searches by the slapd component in 389 Directory Server. This can be exploited by remote attackers to cause a denial of service, resulting in a daemon crash, or potentially have other unspecified impacts. This can be achieved through the submission of multiple search requests.
Recommendations
For version 1.2.7.5, consider restricting access to the simple paged result search functionality until a patch is available. As a temporary workaround, limiting the number of concurrent search requests may help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
389 Directory Server