RHSA-2008:0269: Critical: redhat-ds-base security update
Red Hat Directory Server is an LDAPv3 compliant server. The redhat-ds-basepackage includes the LDAP server and command line utilities for serveradministration.A buffer overflow flaw was found in the Red Hat Directory Server 8.0regular expression handler. An unauthenticated attacker could construct amalicious LDAP query that could cause the LDAP server to crash, or,possibly, execute arbitrary code. (CVE-2008-1677)All users of Red Hat Directory Server should upgrade to this updatedpackage, which resolves this issue.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2008:0269?
The severity of RHSA-2008:0269 is classified as critical due to a buffer overflow vulnerability.
How do I fix RHSA-2008:0269?
To fix RHSA-2008:0269, upgrade the redhat-ds-base and redhat-ds-base-devel packages to version 8.0.3-16.el5d or later.
Which systems are affected by RHSA-2008:0269?
Red Hat Directory Server versions prior to 8.0.3-16.el5d are affected by RHSA-2008:0269.
What type of vulnerability is described in RHSA-2008:0269?
RHSA-2008:0269 describes a buffer overflow vulnerability in the regular expression handler of Red Hat Directory Server.
Can RHSA-2008:0269 be exploited remotely?
Yes, RHSA-2008:0269 can be exploited remotely by sending crafted inputs to the Red Hat Directory Server.