RHSA-2011:0293: Moderate: Red Hat Directory Server security update

Red Hat Directory Server is an LDAPv3-compliant directory server. Theredhat-ds-base package includes the LDAP server and command line utilitiesfor server administration.A flaw was found in the way Red Hat Directory Server handled simple pagedresult searches. If an unauthenticated user were able to send multiplesimple paged search requests to Directory Server, it could cause the serverto crash. (CVE-2011-0019)When multiple Red Hat Directory Server instances were configured on thesystem to run under different unprivileged users, the Directory Serversetup scripts set insecure permissions on the /var/run/dirsrv/ directory,which stores process ID (pid) files. A local user could use this flaw tomanipulate the pid files in that directory, possibly preventing DirectoryServer instances from starting correctly, or causing the Directory Serverinit script to kill an arbitrary process when shutting down DirectoryServer. (CVE-2011-0022)It was found that multiple scripts shipped with Red Hat Directory Serverset the LDLIBRARYPATH environment variable to an insecure valuecontaining an empty path. A local user able to trick a user running thosescripts (usually the root user) to run them while working from anattacker-writable directory could use this flaw to escalate theirprivileges via a specially-crafted dynamic library. (CVE-2011-0532)All Red Hat Directory Server users should upgrade to these updatedpackages, which correct these issues. After installing the updatedpackages, the dirsrv daemon must be restarted ("service dirsrv restart")for the update to take effect.