CVE-2008-1677: Buffer Overflow
Buffer overflow in the regular expression handler in Red Hat Directory Server 8.0 and 7.1 before SP6 allows remote attackers to cause a denial of service (slapd crash) and possibly execute arbitrary code via a crafted LDAP query that triggers the overflow during translation to a regular expression.
Other sources
Nathan Kinder discovered that Red Hat / Fedora Directory Server uses fixed-size buffer for storing regular expressions used in LDAP searches. This buffer can overflow when search pattern from user-supplied LDAP request is translated into a regular expression, resulting in a slapd daemon crash, or, possibly, arbitrary code execution. This issue can be triggered by any user permitted to perform LDAP searches, including anonymous user if anonymous access is permitted by ACLs (permitted by default).
Affected versions: Red Hat Directory Server 7.1 Red Hat Directory Server 8 Fedora Directory Server 1.1
— Red Hat
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2008-1677?
CVE-2008-1677 is classified as a high severity vulnerability due to its potential to cause denial of service and possibly allow remote code execution.
How do I fix CVE-2008-1677?
To fix CVE-2008-1677, update Red Hat Directory Server to version 8.0.3-16.el5d or install the necessary service packs for version 7.1.
What are the affected versions for CVE-2008-1677?
CVE-2008-1677 affects Red Hat Directory Server versions 7.1 (all service packs up to SP5) and 8.0 prior to SP6.
Can CVE-2008-1677 be exploited remotely?
Yes, CVE-2008-1677 can be exploited remotely through crafted LDAP queries.
What impacts does CVE-2008-1677 have on systems?
The impact of CVE-2008-1677 includes the potential for denial of service due to slapd crashes and possible execution of arbitrary code.