RHSA-2008:0201Critical

Red Hat Security Advisory: redhat-ds-admin security update

Published
April 15, 2008
Last Modified
November 2, 2026

🔗 CVE IDs covered (2)

CVE-2008-0892 →CVE-2008-0893 →

📋 Description

CVE-2008-0892 — Server: shell command injection in CGI replication monitor CVE-2008-0893 — Server: unrestricted access to CGI scripts

🎯 Affected products18

  • Red Hat Directory Server 8 (for RHEL 5 Server)
  • Red Hat Directory Server 8.0 (for AS v. 4)
  • Red Hat Directory Server 8.0 (for ES v. 4)
  • redhat-ds-admin-0:8.0.0-6.el4dsrv.i386 as a component of Red Hat Directory Server 8.0 (for AS v. 4)
  • redhat-ds-admin-0:8.0.0-6.el4dsrv.i386 as a component of Red Hat Directory Server 8.0 (for ES v. 4)
  • redhat-ds-admin-0:8.0.0-6.el4dsrv.src as a component of Red Hat Directory Server 8.0 (for AS v. 4)
  • redhat-ds-admin-0:8.0.0-6.el4dsrv.src as a component of Red Hat Directory Server 8.0 (for ES v. 4)
  • redhat-ds-admin-0:8.0.0-6.el4dsrv.x86_64 as a component of Red Hat Directory Server 8.0 (for AS v. 4)
  • redhat-ds-admin-0:8.0.0-6.el4dsrv.x86_64 as a component of Red Hat Directory Server 8.0 (for ES v. 4)
  • redhat-ds-admin-0:8.0.0-6.el5dsrv.i386 as a component of Red Hat Directory Server 8 (for RHEL 5 Server)
  • redhat-ds-admin-0:8.0.0-6.el5dsrv.src as a component of Red Hat Directory Server 8 (for RHEL 5 Server)
  • redhat-ds-admin-0:8.0.0-6.el5dsrv.x86_64 as a component of Red Hat Directory Server 8 (for RHEL 5 Server)
  • redhat-ds-admin-debuginfo-0:8.0.0-6.el4dsrv.i386 as a component of Red Hat Directory Server 8.0 (for AS v. 4)
  • redhat-ds-admin-debuginfo-0:8.0.0-6.el4dsrv.i386 as a component of Red Hat Directory Server 8.0 (for ES v. 4)
  • redhat-ds-admin-debuginfo-0:8.0.0-6.el4dsrv.x86_64 as a component of Red Hat Directory Server 8.0 (for AS v. 4)
  • redhat-ds-admin-debuginfo-0:8.0.0-6.el4dsrv.x86_64 as a component of Red Hat Directory Server 8.0 (for ES v. 4)
  • redhat-ds-admin-debuginfo-0:8.0.0-6.el5dsrv.i386 as a component of Red Hat Directory Server 8 (for RHEL 5 Server)
  • redhat-ds-admin-debuginfo-0:8.0.0-6.el5dsrv.x86_64 as a component of Red Hat Directory Server 8 (for RHEL 5 Server)

✅ Remediation

Users running Red Hat Directory Server on Red Hat Enterprise Linux: Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/FAQ_58_10188 Users running Red Hat Directory Server on Solaris: An archive (in .tar.gz format) containing the updated Solaris packages in .pkg format is available in the Red Hat Directory Server 8.0 Solaris channel on the Red Hat Network. This archive also contains a file with further instructions about how to install/upgrade the packages using Solaris native package management tools.

🔗 References (5)