9

CVE-2008-0892

The replication monitor CGI script (repl-monitor-cgi.pl) in Red Hat Administration Server, as used by Red Hat Directory Server 8.0 EL4 and EL5, allows remote attackers to execute arbitrary commands.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Redhat ≫ Directory Server Version 7.1
Redhat ≫ Directory Server Version 8 Update el4
Redhat ≫ Directory Server Version 8 Update el5
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 14.02% 0.961
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9 8 10
AV:N/AC:L/Au:S/C:C/I:C/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01433676
Broken Link
http://secunia.com/advisories/29761
Broken Link
http://secunia.com/advisories/29826
Broken Link
http://secunia.com/advisories/30114
Broken Link
http://www.redhat.com/support/errata/RHSA-2008-0199.html
Broken Link
http://www.redhat.com/support/errata/RHSA-2008-0201.html
Broken Link
http://www.securityfocus.com/bid/28802
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1019856
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2008/1449/references
Broken Link
https://bugzilla.redhat.com/show_bug.cgi?id=437301
Vendor Advisory
Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/41840
Third Party Advisory
VDB Entry
https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00380.html
Third Party Advisory
https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00386.html
Third Party Advisory