CVE-2008-3283: High severity red hat 389 directory server vulnerability
Multiple memory leaks in Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory Server 1.1.1 and earlier allow remote attackers to cause a denial of service (memory consumption) via vectors involving (1) the authentication / bind phase and (2) anonymous LDAP search requests.
Other sources
Richard Megginson identified multiple memory leaks affecting Red Hat Directory Server and Fedora Directory Server. These issues may possibly be triggered by unauthenticated remote attackers with access to LDAP port. An attacker can cause Directory Server to use excessive amount of memory, and possibly crash or terminate unexpectedly when running out of available memory. Memory leaks that can be triggered by an anonymous user occur during authentication / bind phase, or in (anonymous) LDAP search requests.
Affected version: Red Hat Directory Server 7.1, 8.0 Fedora Directory Server 1.1.1 and earlier
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-3283?
CVE-2008-3283 has a moderate severity level due to its potential for causing denial of service through memory consumption.
How do I fix CVE-2008-3283?
To remediate CVE-2008-3283, upgrade to Red Hat Directory Server 7.1 SP7 or later, or to Red Hat Directory Server 8.
What types of attacks can exploit CVE-2008-3283?
CVE-2008-3283 can be exploited through remote attacks targeting the authentication/bind phase and anonymous LDAP searches.
Which versions are affected by CVE-2008-3283?
CVE-2008-3283 affects Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory Server 1.1.1 and earlier.
What impact does CVE-2008-3283 have on systems?
The impact of CVE-2008-3283 is a denial of service caused by memory leaks that lead to excessive memory consumption.