REDHAT-BUG-458977
First published: Wed Aug 13 2008(Updated: )
Richard Megginson identified multiple memory leaks affecting Red Hat Directory Server and Fedora Directory Server. These issues may possibly be triggered by unauthenticated remote attackers with access to LDAP port. An attacker can cause Directory Server to use excessive amount of memory, and possibly crash or terminate unexpectedly when running out of available memory. Memory leaks that can be triggered by an anonymous user occur during authentication / bind phase, or in (anonymous) LDAP search requests. Affected version: Red Hat Directory Server 7.1, 8.0 Fedora Directory Server 1.1.1 and earlier
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Red Hat Directory Server | =7.1=8.0 | |
| Red Hat 389 Directory Server | <1.1.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of REDHAT-BUG-458977?
The severity of REDHAT-BUG-458977 is considered critical as it allows unauthenticated remote attackers to possibly exploit memory leaks.
How do I fix REDHAT-BUG-458977?
Fixing REDHAT-BUG-458977 involves updating to the latest patched version of Red Hat Directory Server or Fedora Directory Server.
What are the affected versions related to REDHAT-BUG-458977?
REDHAT-BUG-458977 affects Red Hat Directory Server version 7.1 and 8.0, as well as Fedora Directory Server up to version 1.1.1.
What causes the vulnerability identified in REDHAT-BUG-458977?
The vulnerability in REDHAT-BUG-458977 is caused by multiple memory leaks that can be triggered by unauthenticated remote access to the LDAP port.
What impact can REDHAT-BUG-458977 have on my server?
The impact of REDHAT-BUG-458977 can lead to excessive memory usage on the Directory Server, potentially causing denial-of-service conditions.
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2008-3283
- agent/severity
- agent/references
- agent/description
- agent/event
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/red hat
- canonical/red hat directory server
- vendor/fedora
- canonical/red hat 389 directory server