CVE-2008-0893: High severity redhat directory server vulnerability
Red Hat Administration Server, as used by Red Hat Directory Server 8.0 EL4 and EL5, does not properly restrict access to CGI scripts, which allows remote attackers to perform administrative actions.
Other sources
Richard Megginson discovered that Admin Server as used by Red Hat Directory Server 8 and Fedora Directory Server does not properly restrict access to CGI scripts. This could allow unauthenticated user to get access to information or perform tasks that should be restricted to authenticated administrative users.
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-0893?
CVE-2008-0893 has a medium severity rating, indicating it poses a notable risk to affected systems.
How do I fix CVE-2008-0893?
To fix CVE-2008-0893, apply the security updates provided by Red Hat for Directory Server version 8.0 EL4 and EL5.
What are the potential impacts of CVE-2008-0893?
CVE-2008-0893 allows remote attackers to perform unauthorized administrative actions on the Red Hat Administration Server.
Which versions are affected by CVE-2008-0893?
CVE-2008-0893 affects Red Hat Directory Server 8.0 EL4 and EL5.
Who discovered the vulnerability CVE-2008-0893?
CVE-2008-0893 was discovered by Richard Megginson.