CVE-2008-0892: redhat directory_server Improper Input Validation

EPSS trend

Probability

14.02%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

0.00 pp

From 14.02% on 19-09-2026

19-09-202619-10-2026

EPSS score

14.02%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

19 links

exchange.xforce.ibmcloud.com/vulnerabilities/41840VDB EntryX Refsource XFThird Party Advisory
www.redhat.com/archives/fedora-package-announce/2008-April/msg00386.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01433676Vendor AdvisoryX Refsource HPBroken Link
secunia.com/advisories/30114Third Party AdvisoryX Refsource SECUNIABroken Link
www.securitytracker.com/id?1019856VDB EntryX Refsource SECTRACKThird Party Advisory
www.securityfocus.com/bid/28802VDB EntryX Refsource BIDThird Party Advisory
www.redhat.com/support/errata/RHSA-2008-0201.htmlVendor AdvisoryX Refsource REDHATBroken Link
www.redhat.com/archives/fedora-package-announce/2008-April/msg00380.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
www.vupen.com/english/advisories/2008/1449/referencesVDB EntryX Refsource VUPENBroken Link
www.redhat.com/support/errata/RHSA-2008-0199.htmlVendor AdvisoryX Refsource REDHATBroken Link

Show all 19 references

secunia.com/advisories/29761Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/29826Third Party AdvisoryX Refsource SECUNIABroken Link
bugzilla.redhat.com/show_bug.cgi?id=437301X Refsource CONFIRMIssue TrackingVendor AdvisoryREPORT
access.redhat.com/errata/RHSA-2008:0199Advisory
www.redhat.com/security/updates/classification/ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0199.jsonAdvisory
access.redhat.com/security/cve/CVE-2008-0892REPORT
www.cve.org/CVERecord?id=CVE-2008-0892Advisory
nvd.nist.gov/vuln/detail/CVE-2008-0892Advisory

Related vulnerabilities

CVE-2013-2219debian389-ds-base+101.76%13y ago31-07-2013 10:00The Red Hat Directory Server before 8.2.11-13 and 389 Directory Server do not properly restrict access to entity attributes, which allows remote authenticated users to obtain sensitive information via a search query for the attribute.CVE-2013-4485debian389-ds-base+121.99%12y ago23-11-2013 11:00389 Directory Server 1.2.11.15 (aka Red Hat Directory Server before 8.2.11-14) allows remote authenticated users to cause a denial of service (crash) via multiple @ characters in a GER attribute list in a search request.CVE-2020-35518debian389-ds-base+181.54%5y ago26-03-2021 16:43When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in the LDAP database.CVE-2014-3562debian389-ds-base+132.20%12y ago21-08-2014 14:00Red Hat Directory Server 8 and 389 Directory Server, when debugging is enabled, allows remote attackers to obtain sensitive replicated metadata by searching the directory.CVE-2008-2928redhatdirectory_server6.64%18y ago29-08-2008 18:00Multiple buffer overflows in the adminutil library in CGI applications in Red Hat Directory Server 7.1 before SP7 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted Accept-Language HTTP header.CVE-2008-2929redhatdirectory_server+31.70%18y ago29-08-2008 18:00Multiple cross-site scripting (XSS) vulnerabilities in the adminutil library in the Directory Server Administration Express and Directory Server Gateway (DSGW) web interface in Red Hat Directory Server 7.1 before SP7 and 8 EL4 and EL5, and Fedora Directory Server, allow remote attackers to inject arbitrary web script or HTML via input values that use % (percent) escaping.

All vulnerabilities indirectory_server

CVE-2008-0892: redhat directory_server Improper Input Validation

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References