CVE-2008-0892: Input Validation
Richard Megginson discovered a shell command injection flaw in the Admin Server's replication monitor CGI perl script repl-monitor-cgi.pl. Script parameters were not properly sanitized prior to being passed to system() function. An attacker able to access replication monitor CGI script could execute arbitrary shell command with privileges of Admin Server.
Affected versions: - Red Hat Directory Server 7.1 - Admin Server runs with root privileges - Red Hat Directory Server 8 - Admin Server runs under an unprivileged user, following users by default: - nobody on Red Hat Enterprise Linux and Solaris - daemon on HP-UX - Fedora Directory Server - Admin Server runs under an unprivileged user, nobody by default
Other sources
The replication monitor CGI script (repl-monitor-cgi.pl) in Red Hat Administration Server, as used by Red Hat Directory Server 8.0 EL4 and EL5, allows remote attackers to execute arbitrary commands.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-0892?
CVE-2008-0892 has a high severity rating due to the potential for remote command execution through the replication monitor CGI script.
How do I fix CVE-2008-0892?
To fix CVE-2008-0892, upgrade to the patched version of Red Hat Directory Server as recommended in security advisories.
What systems are affected by CVE-2008-0892?
CVE-2008-0892 affects various versions of Red Hat Fedora Directory Server and Red Hat Directory Server, specifically 7.1, 8-el4, and 8-el5.
Can CVE-2008-0892 be exploited remotely?
Yes, CVE-2008-0892 can be exploited remotely by attackers with access to the replication monitor CGI script.
What type of vulnerability is CVE-2008-0892?
CVE-2008-0892 is categorized as a shell command injection vulnerability.