REDHAT-BUG-604783
First published: Wed Jun 16 2010(Updated: )
A vulnerability in Red Hat Directory Server and the 389 Directory Server was discovered. The code that parses the GER request (_ger_parse_control()) can dereference a NULL pointer. An unauthenticated user able to communicate with the Directory Server could use a crafted search query that would cause the Directory Server to crash. This issue has been assigned the name <a href="https://access.redhat.com/security/cve/CVE-2010-2222">CVE-2010-2222</a>.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Red Hat Directory Server | ||
| 389 Directory Server |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://access.redhat.com/security/cve/CVE-2010-2222
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=424540&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=424540&action=edit
- http://git.fedorahosted.org/git/?p=389/ds.git;a=commitdiff;h=78c50664d6#patch10
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=604783#c2
- http://git.fedorahosted.org/git/?p=389/ds.git;a=commitdiff;h=82625ebf67
- https://bugzilla.redhat.com/show_bug.cgi?id=604783
Frequently Asked Questions
What is the severity of REDHAT-BUG-604783?
The severity of REDHAT-BUG-604783 is considered critical due to the potential for unauthenticated remote code execution.
How do I fix REDHAT-BUG-604783?
To fix REDHAT-BUG-604783, it is recommended to apply the latest patches provided by Red Hat for the Directory Server or 389 Directory Server.
What are the potential impacts of REDHAT-BUG-604783?
The potential impacts of REDHAT-BUG-604783 include denial of service and unauthorized access to sensitive directory information.
Who is affected by REDHAT-BUG-604783?
REDHAT-BUG-604783 affects users running vulnerable versions of the Red Hat Directory Server and the 389 Directory Server.
Is REDHAT-BUG-604783 exploitable?
Yes, REDHAT-BUG-604783 is exploitable by an unauthenticated user who can send a crafted search query to the Directory Server.
- collector/redhat-bugzilla
- alias/CVE-2010-2222
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- agent/severity
- agent/references
- agent/description
- agent/event
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/red hat
- canonical/red hat directory server
- canonical/389 directory server