Directory Server
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:directory_server:7.1:sp1:*:*:*:*:*:*
part: a version: 7.1 update: sp1
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Directory Server (3e674fee-72c5-5378-a09c-982c9590dba8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/389ds/389-ds-base |
purl2cpe | 2026-06-01 10:12:53.702129 |
pkg:gitlab/redhat/389-ds-base |
purl2cpe | 2026-06-01 10:12:53.702130 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2008-3283 |
vulnerable | 2026-06-08 04:50:34.040972 |
Details available
Multiple memory leaks in Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory Server 1.1.1 and earlier allow remote attackers to cause a denial of service (memory consumption) via vectors involving (1) the authentication / bind phase and (2) anonymous LDAP search requests.
Published: 2008-08-29T18:00:00.000Z
Updated: 2024-08-07T09:28:41.997Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-2930 |
vulnerable | 2026-06-08 04:50:32.588800 |
Details available
Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory Server 1.1.1 allow remote attackers to cause a denial of service (CPU consumption and search outage) via crafted LDAP search requests with patterns, related to a single-threaded regular-expression subsystem.
Published: 2008-08-29T18:00:00.000Z
Updated: 2024-08-07T09:21:34.500Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-2929 |
vulnerable | 2026-06-08 04:50:32.585318 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in the adminutil library in the Directory Server Administration Express and Directory Server Gateway (DSGW) web interface in Red Hat Directory Server 7.1 before SP7 and 8 EL4 and EL5, and Fedora Directory Server, allow remote attackers to inject arbitrary web script or HTML via input values that use % (percent) escaping.
Published: 2008-08-29T18:00:00.000Z
Updated: 2024-08-07T09:21:34.992Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-2928 |
vulnerable | 2026-06-08 04:50:32.581055 |
Details available
Multiple buffer overflows in the adminutil library in CGI applications in Red Hat Directory Server 7.1 before SP7 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted Accept-Language HTTP header.
Published: 2008-08-29T18:00:00.000Z
Updated: 2024-08-07T09:21:34.490Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-1677 |
vulnerable | 2026-06-08 04:50:21.479740 |
Details available
Buffer overflow in the regular expression handler in Red Hat Directory Server 8.0 and 7.1 before SP6 allows remote attackers to cause a denial of service (slapd crash) and possibly execute arbitrary code via a crafted LDAP query that triggers the overflow during translation to a regular expression.
Published: 2008-05-12T16:00:00.000Z
Updated: 2024-08-07T08:32:01.281Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.