CVE-2008-0890
published 2008-03-12CVE-2008-0890: Red Hat Directory Server 7.1 before SP4 uses insecure permissions for certain directories, which allows local users to modify JAR files and execute arbitrary…
PriorityP415medium4.6CVSS 2.0
AVLACLAuNCPIPAP
EPSS
0.37%
29.7th percentile
Red Hat Directory Server 7.1 before SP4 uses insecure permissions for certain directories, which allows local users to modify JAR files and execute arbitrary code via unknown vectors.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | directory_server | <= 7.1 | — |
CVSS provenance
nvdv2.04.6MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P
vendor_redhat4.6MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
7.1: insecure default permissions on jars directory
vendor_redhat·2008-03-11·CVSS 4.6
CVE-2008-0890 [MEDIUM] CWE-732 7.1: insecure default permissions on jars directory
7.1: insecure default permissions on jars directory
Red Hat Directory Server 7.1 before SP4 uses insecure permissions for certain directories, which allows local users to modify JAR files and execute arbitrary code via unknown vectors.
GHSA
GHSA-pj65-cvc7-46r9: Red Hat Directory Server 7
ghsa_unreviewed·2022-05-01
CVE-2008-0890 [MEDIUM] GHSA-pj65-cvc7-46r9: Red Hat Directory Server 7
Red Hat Directory Server 7.1 before SP4 uses insecure permissions for certain directories, which allows local users to modify JAR files and execute arbitrary code via unknown vectors.
No detection rules found.
No public exploits indexed.
http://secunia.com/advisories/29350http://www.redhat.com/support/errata/RHSA-2008-0173.htmlhttp://www.securityfocus.com/bid/28204http://www.securitytracker.com/id?1019577https://exchange.xforce.ibmcloud.com/vulnerabilities/41152http://secunia.com/advisories/29350http://www.redhat.com/support/errata/RHSA-2008-0173.htmlhttp://www.securityfocus.com/bid/28204http://www.securitytracker.com/id?1019577https://exchange.xforce.ibmcloud.com/vulnerabilities/41152
2008-03-12
Published