CVE-2008-0889

Red Hat Directory Server 8.0, when running on Red Hat Enterprise Linux, uses insecure permissions for the redhat-idm-console script, which allows local users to execute arbitrary code by modifying the script.

Score

CVSS 2.0 2.1 Low

Status

Modified - secalert@redhat.com

Published

2008-03-20

Last modified

2024-08-07

Weaknesses

CWE-264

Affected products

• Directory Server (Redhat)

References

• http://secunia.com/advisories/29482
• http://www.redhat.com/support/errata/RHSA-2008-0191.html
• http://www.securityfocus.com/bid/28327
• http://www.securitytracker.com/id?1019677