CVE-2008-1677: Buffer Overflow

Published Feb 23, 2006
·
Updated

Buffer overflow in the regular expression handler in Red Hat Directory Server 8.0 and 7.1 before SP6 allows remote attackers to cause a denial of service (slapd crash) and possibly execute arbitrary code via a crafted LDAP query that triggers the overflow during translation to a regular expression.

Other sources

Nathan Kinder discovered that Red Hat / Fedora Directory Server uses fixed-size buffer for storing regular expressions used in LDAP searches. This buffer can overflow when search pattern from user-supplied LDAP request is translated into a regular expression, resulting in a slapd daemon crash, or, possibly, arbitrary code execution. This issue can be triggered by any user permitted to perform LDAP searches, including anonymous user if anonymous access is permitted by ACLs (permitted by default).

Affected versions: Red Hat Directory Server 7.1 Red Hat Directory Server 8 Fedora Directory Server 1.1

Red Hat

Affected Software

8 affected componentsFixes available
redhat/redhat-ds-base<0:8.0.3-16.el5d
0:8.0.3-16.el5d
redhat Directory Server=7.1-sp1
redhat Directory Server=7.1-sp2
redhat Directory Server=7.1-sp3
redhat Directory Server=7.1-sp4
redhat Directory Server=7.1-sp5
redhat Directory Server=8.0
redhat Fedora Directory Server=1.1

Event History

Feb 23, 2006
CVE Published
via Red Hat·12:00 AM
Apr 30, 2008
Data Sourced
via Red Hat·08:22 AM
DescriptionSeverityAffected Software
May 12, 2008
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description

Parent advisories

This vulnerability appears in the following advisories.

Frequently Asked Questions

1

What is the severity of CVE-2008-1677?

CVE-2008-1677 is classified as a high severity vulnerability due to its potential to cause denial of service and possibly allow remote code execution.

2

How do I fix CVE-2008-1677?

To fix CVE-2008-1677, update Red Hat Directory Server to version 8.0.3-16.el5d or install the necessary service packs for version 7.1.

3

What are the affected versions for CVE-2008-1677?

CVE-2008-1677 affects Red Hat Directory Server versions 7.1 (all service packs up to SP5) and 8.0 prior to SP6.

4

Can CVE-2008-1677 be exploited remotely?

Yes, CVE-2008-1677 can be exploited remotely through crafted LDAP queries.

5

What impacts does CVE-2008-1677 have on systems?

The impact of CVE-2008-1677 includes the potential for denial of service due to slapd crashes and possible execution of arbitrary code.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203