CVE-2011-0019: Input Validation
First published: Wed Jan 19 2011(Updated: )
A flaw was found in the way that the Red Hat Directory Server handled simple paged result searches. If an unauthenticated user were able to send multiple simple paged search requests to Directory Server, it could cause the server to crash.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Red Hat 389 Directory Server | =1.2.7.5 | |
| Red Hat Directory Server | =8.2 | |
| Red Hat Directory Server | =8.2.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.redhat.com/show_bug.cgi?id=670914
- http://www.redhat.com/support/errata/RHSA-2011-0293.html
- http://www.securityfocus.com/bid/46489
- https://bugzilla.redhat.com/show_bug.cgi?id=666076
- http://www.securitytracker.com/id?1025102
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=666076
- https://rhn.redhat.com/errata/RHSA-2011-0293.html
Frequently Asked Questions
What is the severity of CVE-2011-0019?
CVE-2011-0019 is considered a high severity vulnerability due to the possibility of an unauthenticated user causing a crash in the directory server.
How do I fix CVE-2011-0019?
To fix CVE-2011-0019, it is recommended to update the Red Hat Directory Server to a version that contains the security patch.
What versions are affected by CVE-2011-0019?
CVE-2011-0019 affects Red Hat Directory Server versions 1.2.7.5, 8.2, and 8.2.3.
Can CVE-2011-0019 be exploited remotely?
Yes, CVE-2011-0019 can be exploited remotely if an unauthenticated user sends multiple simple paged search requests.
What impacts does CVE-2011-0019 have on Red Hat Directory Server?
CVE-2011-0019 can lead to a crash of the Red Hat Directory Server, impacting service availability.
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2011-0019
- agent/author
- agent/severity
- agent/last-modified-date
- agent/weakness
- agent/references
- agent/description
- agent/event
- agent/trending
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/fedoraproject
- canonical/red hat 389 directory server
- version/red hat 389 directory server/1.2.7.5
- vendor/redhat
- canonical/red hat directory server
- version/red hat directory server/8.2
- version/red hat directory server/8.2.3