Buffer overflow in Redhat Directory Server

CVE-2008-1677

Buffer overflow in the regular expression handler in Red Hat Directory Server 8.0 and 7.1 before SP6 allows remote attackers to cause a denial of service (slapd crash) and possibly execute arbitrary code via a crafted LDAP query that triggers the overflow during translation to a regular expression.

Vulnerability class: Buffer Overflow

EPSS: 0.049 (91.2th percentile) — read the EPSS interpretation.

Affected products

Redhat Directory_server — versions 7.1, 8.0
Redhat Fedora_directory_server — versions 1.1
N/a — versions n/a

Weakness classification (CWE)

CWE-120 — Buffer Copy without Checking Size of Input (Classic Buffer Overflow)

References

secalert@redhat.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
secalert@redhat.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
secalert@redhat.com (Third Party Advisory, x_refsource_MISC, Issue Tracking)
secalert@redhat.com (x_refsource_SECUNIA, Broken Link, third-party-advisory)
secalert@redhat.com (x_refsource_SECUNIA, Broken Link, third-party-advisory)
secalert@redhat.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_XF)
secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)