CVE-2008-1677
Fixed in a distro release EPSS 5%
Buffer overflow in the regular expression handler in Red Hat Directory Server 8.0 and 7.1 before SP6 allows remote attackers to cause a denial of service (slapd crash) and possibly execute arbitrary code via a crafted LDAP query that triggers the overflow during translation to a regular expression.
Products: redhat directory_server, redhat fedora_directory_server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat directory server 7.1 | redhat-ds | 0:7.1SP6-9.RHEL4 |
| Red Hat directory server 8 | redhat-ds-base | 0:8.0.3-16.el5dsrv |
| Red Hat directory server 8 | redhat-ds-base-debuginfo | 0:8.0.3-16.el5dsrv |
| Red Hat directory server 8 | redhat-ds-base-devel | 0:8.0.3-16.el5dsrv |