Richard Megginson

**Name of the Vulnerable Software and Affected Versions** Red Hat Directory Server versions 8.0 EL4 and EL5 **Description** The issue concerns the replication monitor CGI script, specifically the repl-monitor-cgi.pl script, which allows remote attackers to execute arbitrary commands. **Recommendations** For Red Hat Directory Server versions 8.0 EL4 and EL5, consider disabling the repl-monitor-cgi.pl script as a temporary workaround until a patch is available. Restrict access to the replication monitor CGI script to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Red Hat Administration Server versions 8.0 EL4 and EL5 **Description** The issue is related to improper access restriction to CGI scripts, allowing remote attackers to perform administrative actions. **Recommendations** For Red Hat Administration Server versions 8.0 EL4 and EL5, restrict access to CGI scripts to prevent unauthorized administrative actions.