CVE-2011-0022: Medium severity red hat 389 directory server vulnerability
It was discovered that 389 / Red Hat Directory Server's setup scripts set insecure permissions (0777) on the /var/run/dirsrv directory used to store Directory Server's pid files when multiple Directory Server instances were configured on the system to be run under the different unprivileged users.
A local user could use this flaw to create, remove or replace pid files in this directory, possibly preventing correct start of the Directory Server instances, or causing Directory Server init script to kill arbitrary process during the Directory Server shutdown.
Other sources
The setup scripts in 389 Directory Server 1.2.x (aka Red Hat Directory Server 8.2.x), when multiple unprivileged instances are configured, use 0777 permissions for the /var/run/dirsrv directory, which allows local users to cause a denial of service (daemon outage or arbitrary process termination) by replacing PID files contained in this directory.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-0022?
CVE-2011-0022 is considered a medium-severity vulnerability due to insecure permissions set on the /var/run/dirsrv directory.
How do I fix CVE-2011-0022?
To fix CVE-2011-0022, you need to update to a secure version of Red Hat Directory Server that addresses this permission issue.
What software is affected by CVE-2011-0022?
CVE-2011-0022 affects multiple versions of Red Hat Directory Server and the 389 Directory Server.
What type of vulnerability is CVE-2011-0022?
CVE-2011-0022 is a permission-related vulnerability impacting the security of directory server instances running on the system.
Can CVE-2011-0022 allow unauthorized access?
Yes, the insecure permissions set by CVE-2011-0022 could potentially allow unauthorized users to access or manipulate pid files.