PT-2008-4370 · Red Hat · Red Hat Adminutil

Tomas Hoger · Published 2008-09-12 · Updated 2023-02-13 · CVE-2008-2932

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Red Hat adminutil version 1.1.6

Description A heap-based buffer overflow issue exists, allowing remote attackers to cause a denial of service or possibly execute arbitrary code via percent encoded HTTP input to unspecified CGI scripts in Fedora Directory Server.

Recommendations For Red Hat adminutil version 1.1.6, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2008-2932

Affected Products

Red Hat Adminutil

References · 7

• http://secunia.com/advisories/31777 · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2008-September/msg00218.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-2932 · Security Note
• https://redhat.com/archives/fedora-package-announce/2008-September/msg00449.html · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=454662 · Note
• http://securityfocus.com/bid/31106 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45203 · Note