GCVE - cpe:2.3:a:redhat:directory_server:8.0:el5:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:directory_server:8.0:el5:*:*:*:*:*:*

part: a version: 8.0 update: el5

Vendor	Redhat (`e942785a-ca89-506e-bd99-50782639cde3`)
Product	Directory Server (`3e674fee-72c5-5378-a09c-982c9590dba8`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/389ds/389-ds-base`	purl2cpe	2026-06-01 10:12:53.711515
`pkg:gitlab/redhat/389-ds-base`	purl2cpe	2026-06-01 10:12:53.711516

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-2929`	vulnerable	2026-06-08 04:50:32.587213	Details available Multiple cross-site scripting (XSS) vulnerabilities in the adminutil library in the Directory Server Administration Express and Directory Server Gateway (DSGW) web interface in Red Hat Directory Server 7.1 before SP7 and 8 EL4 and EL5, and Fedora Directory Server, allow remote attackers to inject arbitrary web script or HTML via input values that use % (percent) escaping. Published: 2008-08-29T18:00:00.000Z Updated: 2024-08-07T09:21:34.992Z Open on db.gcve.eu Reference links http://secunia.com/advisories/31612 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01532861 http://www.redhat.com/docs/manuals/dir-server/release-notes/7.1SP7/index.html http://secunia.com/advisories/31702 https://rhn.redhat.com/errata/RHSA-2008-0601.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-0893`	vulnerable	2026-06-08 04:50:18.136934	Details available Red Hat Administration Server, as used by Red Hat Directory Server 8.0 EL4 and EL5, does not properly restrict access to CGI scripts, which allows remote attackers to perform administrative actions. Published: 2008-04-16T18:00:00.000Z Updated: 2024-08-07T08:01:39.931Z Open on db.gcve.eu Reference links https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00386.html https://exchange.xforce.ibmcloud.com/vulnerabilities/41843 http://www.securitytracker.com/id?1019857 http://www.securityfocus.com/bid/28802 http://www.redhat.com/support/errata/RHSA-2008-0201.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-0889`	vulnerable	2026-06-08 04:50:18.129045	Details available Red Hat Directory Server 8.0, when running on Red Hat Enterprise Linux, uses insecure permissions for the redhat-idm-console script, which allows local users to execute arbitrary code by modifying the script. Published: 2008-03-20T00:00:00.000Z Updated: 2024-08-07T08:01:40.070Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id?1019677 http://www.redhat.com/support/errata/RHSA-2008-0191.html http://secunia.com/advisories/29482 http://www.securityfocus.com/bid/28327	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.