CVE-2008-0889: Low severity red hat enterprise linux vulnerability

Published Mar 20, 2008

Updated

Red Hat Directory Server 8.0, when running on Red Hat Enterprise Linux, uses insecure permissions for the redhat-idm-console script, which allows local users to execute arbitrary code by modifying the script.

Affected Software

3 affected components

redhat Enterprise Linux

redhat Directory Server=8.0-el4

redhat Directory Server=8.0-el5

Remediation

Patch Available

http://www.redhat.com/support/errata/RHSA-2008-0191.html

Event History

Mar 20, 2008

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

12:44 AM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2008-0889?

CVE-2008-0889 is classified as a medium severity vulnerability due to the potential for local users to execute arbitrary code.

How do I fix CVE-2008-0889?

To fix CVE-2008-0889, ensure that the permissions for the redhat-idm-console script are securely configured to restrict access.

Who is affected by CVE-2008-0889?

CVE-2008-0889 affects users of Red Hat Directory Server version 8.0 running on Red Hat Enterprise Linux.

What can happen if CVE-2008-0889 is exploited?

If exploited, CVE-2008-0889 allows local users to execute arbitrary code which can compromise the system's integrity.

Is there a patch available for CVE-2008-0889?

Yes, patches are available to address CVE-2008-0889, and they should be applied to affected systems promptly.