CVE-2008-1677: redhat directory_server Classic Buffer Overflow
CVSS: 7.5v2.0HighModified
AliasesRHSA-2008:0268RHSA-2008:0269
Published 12-05-2008Last modified 07-08-2024
Vulnerability summary
CVE-2008-1677 is a high (CVSS 7.5) Classic Buffer Overflow vulnerability in redhat directory_server. EPSS estimates a 4.93% chance of exploitation in the next 30 days, higher than 92% of scored vulnerabilities.
CVSS score
7.5/10
010
High · v2.0 (NVD)EPSS score
4.93%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 12-05-2008PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Buffer overflow in the regular expression handler in Red Hat Directory Server 8.0 and 7.1 before SP6 allows remote attackers to cause a denial of service (slapd crash) and possibly execute arbitrary code via a crafted LDAP query that triggers the overflow during translation to a regular expression.
CVSS metrics
1 score · 1 source · 1 versionHigh 7.5Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:P/I:P/A:PSourcesSingle source
EPSS trend
Probability
4.93%
Chance of exploitation in the next 30 days
Percentile
92%
Versus all other CVEs
30-day change
0.00 pp
From 4.93% on 19-09-2026
19-09-202619-10-2026
EPSS score4.93%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Redhat6 products
- directory_server7.1:sp1 | 7.1:sp2 | 7.1:sp3 | 7.1:sp4 | 7.1:sp5 | 8.0
- fedora_directory_server1.1
- redhat-ds< 0:7.1SP6-9.RHEL4
- redhat-ds-base< 0:8.0.3-16.el5dsrv
- redhat-ds-base-debuginfo< 0:8.0.3-16.el5dsrv
1 vendor · 6 products
References
17 links- www.redhat.com/support/errata/RHSA-2008-0268.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
- www.redhat.com/support/errata/RHSA-2008-0269.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
