Redhat-ds-admin Security Bypass Vulnerability

Overview

» IDS/IPS Signatures

Security Sites

iPolicy Networks Security Advisory


Date Discovered:	04/16/2008
Severity:	High
Applications Affected	Redhat Directory Server 8.0 and previous

Synopsis

Security Bypass Vulnerability has been identified in the Redhat Directory Server before 8.0.

Recommended Actions

Upgrade with latest patch.
http://rhn.redhat.com/errata/RHSA-2008-0201.html

Threat Analysis

Red hat administrator server is used by redhat directory server for configuration purpose. Redhat directory server provides all the directory related services like read, write access to the directories in a managed and secured environment.

A Security Bypass Vulnerability has been identified in Red Hat Directory Server 8 and prior. This issue arise because application does not restrict the execution of cgi scripts in default directory.An attacker can take advantage of this issue to execute restricted cgi scripts.

References

http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-0893
http://secunia.com/advisories/29761
http://www.securityfocus.com/bid/28802/discuss
http://xforce.iss.net/xforce/xfdb/41843
http://securitytracker.com/alerts/2008/Apr/1019857.html

Write-up by: Vinod Sharma

Security Sites

“iPolicy is one of the most visionary firewall vendors in the firewall Magic Quadrant. Its architecture of a central session processing engine and multiple content blades that are able to block based on signatures, rules and so on is the closest to the network security ideal.”

Greg Young, John Pescatore
Magic Quadrant for Network Firewalls, 2H04, Gartner

| | | | | | | | |