RHSA-2008:0596Critical

Red Hat Security Advisory: Red Hat Directory Server 7.1 Service Pack 7 security update

Published
August 27, 2008
Last Modified
November 2, 2026

🔗 CVE IDs covered (4)

CVE-2008-2928 →CVE-2008-2929 →CVE-2008-2930 →CVE-2008-3283 →

📋 Description

CVE-2008-2928 — Server: CGI accept language buffer overflow CVE-2008-2929 — Server: multiple XSS issues CVE-2008-2930 — Server: temporary DoS via crafted pattern searches CVE-2008-3283 — Server: multiple memory leaks

🎯 Affected products12

  • RHEL 4 Directory Server AS
  • RHEL 4 Directory Server ES
  • Red Hat Directory Server 7.1 (for AS v. 3)
  • Red Hat Directory Server 7.1 (for ES v. 3)
  • redhat-ds-0:7.1SP7-14.RHEL3.i386 as a component of Red Hat Directory Server 7.1 (for AS v. 3)
  • redhat-ds-0:7.1SP7-14.RHEL3.i386 as a component of Red Hat Directory Server 7.1 (for ES v. 3)
  • redhat-ds-0:7.1SP7-14.RHEL3.src as a component of Red Hat Directory Server 7.1 (for AS v. 3)
  • redhat-ds-0:7.1SP7-14.RHEL3.src as a component of Red Hat Directory Server 7.1 (for ES v. 3)
  • redhat-ds-0:7.1SP7-14.RHEL4.i386 as a component of RHEL 4 Directory Server AS
  • redhat-ds-0:7.1SP7-14.RHEL4.i386 as a component of RHEL 4 Directory Server ES
  • redhat-ds-0:7.1SP7-14.RHEL4.src as a component of RHEL 4 Directory Server AS
  • redhat-ds-0:7.1SP7-14.RHEL4.src as a component of RHEL 4 Directory Server ES

✅ Remediation

This update is available via Red Hat Network. Users running Red Hat Directory Server 7.1 on Red Hat Enterprise Linux should consult the following Knowledge Base article for instruction on how to install updated RPM packages: http://kbase.redhat.com/faq/FAQ_58_10188 Users running Red Hat Directory Server 7.1 on Solaris should consult the Service Pack 7 release notes for installation and upgrade instructions. These release notes are linked to in the "References" section of this erratum.

🔗 References (8)