Red Hat Directory Server Multiple Security Vulnerabilities

Bugtraq ID:	46489
Class:	Design Error
CVE:	CVE-2011-0019 CVE-2011-0022 CVE-2011-0532
Remote:	Yes
Local:	Yes
Published:	Feb 22 2011 12:00AM
Updated:	Feb 22 2011 12:00AM
Credit:	Red Hat
Vulnerable:	RedHat Directory Server 8 EL 5 RedHat Directory Server 8 EL 4
Not Vulnerable:

Red Hat Directory Server Multiple Security Vulnerabilities

Red Hat Directory Server is prone to multiple security vulnerabilities, including:

1. A denial-of-service vulnerability
2. An insecure-permissions vulnerability
3. Multiple local privilege-escalation vulnerabilities

An attacker can exploit these issues to execute arbitrary code with superuser privileges, facilitating the complete compromise of affected computers. Local users may also exploit one of the issues to crash Directory Server, denying service to legitimate users.

Directory Server 8 EL4 and 8 EL5 are vulnerable.

Red Hat Directory Server Multiple Security Vulnerabilities

Attackers can use readily available tools to exploit these issues.

Red Hat Directory Server Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references for more information.

Red Hat Directory Server Multiple Security Vulnerabilities

References:

• Moderate: Red Hat Directory Server security update (Red Hat)
  
• Red Hat Directory Server Homepage (Red Hat)