CVE-2011-0019: Input Validation
A flaw was found in the way that the Red Hat Directory Server handled simple paged result searches. If an unauthenticated user were able to send multiple simple paged search requests to Directory Server, it could cause the server to crash.
Other sources
slapd (aka ns-slapd) in 389 Directory Server 1.2.7.5 (aka Red Hat Directory Server 8.2.x or dirsrv) does not properly handle simple paged result searches, which allows remote attackers to cause a denial of service (daemon crash) or possibly have unspecified other impact via multiple search requests.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-0019?
CVE-2011-0019 is considered a high severity vulnerability due to the possibility of an unauthenticated user causing a crash in the directory server.
How do I fix CVE-2011-0019?
To fix CVE-2011-0019, it is recommended to update the Red Hat Directory Server to a version that contains the security patch.
What versions are affected by CVE-2011-0019?
CVE-2011-0019 affects Red Hat Directory Server versions 1.2.7.5, 8.2, and 8.2.3.
Can CVE-2011-0019 be exploited remotely?
Yes, CVE-2011-0019 can be exploited remotely if an unauthenticated user sends multiple simple paged search requests.
What impacts does CVE-2011-0019 have on Red Hat Directory Server?
CVE-2011-0019 can lead to a crash of the Red Hat Directory Server, impacting service availability.