REDHAT-BUG-604783: High severity red hat directory server vulnerability
A vulnerability in Red Hat Directory Server and the 389 Directory Server was discovered. The code that parses the GER request (gerparsecontrol()) can dereference a NULL pointer. An unauthenticated user able to communicate with the Directory Server could use a crafted search query that would cause the Directory Server to crash.
This issue has been assigned the name CVE-2010-2222.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-604783?
The severity of REDHAT-BUG-604783 is considered critical due to the potential for unauthenticated remote code execution.
How do I fix REDHAT-BUG-604783?
To fix REDHAT-BUG-604783, it is recommended to apply the latest patches provided by Red Hat for the Directory Server or 389 Directory Server.
What are the potential impacts of REDHAT-BUG-604783?
The potential impacts of REDHAT-BUG-604783 include denial of service and unauthorized access to sensitive directory information.
Who is affected by REDHAT-BUG-604783?
REDHAT-BUG-604783 affects users running vulnerable versions of the Red Hat Directory Server and the 389 Directory Server.
Is REDHAT-BUG-604783 exploitable?
Yes, REDHAT-BUG-604783 is exploitable by an unauthenticated user who can send a crafted search query to the Directory Server.