CVE-2008-2930: fedora directory_server Resource Management Errors

EPSS trend

Probability

6.55%

Chance of exploitation in the next 30 days

Percentile

94%

Versus all other CVEs

30-day change

0.00 pp

From 6.55% on 19-09-2026

19-09-202619-10-2026

EPSS score

6.55%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

exploit-databasedoslinuxVerified
RedHat 8/9 - Directory Server Crafted Search Pattern Denial of Service
Maturity: poc

References

17 links

exchange.xforce.ibmcloud.com/vulnerabilities/44733VDB EntryX Refsource XF
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6078VDB EntrySignatureX Refsource OVAL
www.redhat.com/support/errata/RHSA-2008-0602.htmlVendor AdvisoryX Refsource REDHAT
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01532861Vendor AdvisoryX Refsource HP
www.redhat.com/docs/manuals/dir-server/release-notes/7.1SP7/index.htmlX Refsource CONFIRMPatch
secunia.com/advisories/31702Third Party AdvisoryX Refsource SECUNIA
rhn.redhat.com/errata/RHSA-2008-0596.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/31867Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2008/2480VDB EntryX Refsource VUPEN
www.securityfocus.com/bid/30871VDB EntryX Refsource BIDPatch

Show all 17 references

www.redhat.com/archives/fedora-package-announce/2008-September/msg00708.htmlVendor AdvisoryX Refsource FEDORA
www.redhat.com/support/errata/RHSA-2008-0858.htmlVendor AdvisoryX Refsource REDHAT
securitytracker.com/id?1020773VDB EntryX Refsource SECTRACK
bugzilla.redhat.com/show_bug.cgi?id=454065X Refsource CONFIRM
secunia.com/advisories/31565Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/31627Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/archives/fedora-package-announce/2008-September/msg00521.htmlVendor AdvisoryX Refsource FEDORA

Related vulnerabilities

CVE-2013-2219debian389-ds-base+101.76%13y ago31-07-2013 10:00The Red Hat Directory Server before 8.2.11-13 and 389 Directory Server do not properly restrict access to entity attributes, which allows remote authenticated users to obtain sensitive information via a search query for the attribute.CVE-2013-4485debian389-ds-base+121.99%12y ago23-11-2013 11:00389 Directory Server 1.2.11.15 (aka Red Hat Directory Server before 8.2.11-14) allows remote authenticated users to cause a denial of service (crash) via multiple @ characters in a GER attribute list in a search request.CVE-2020-35518debian389-ds-base+181.54%5y ago26-03-2021 16:43When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in the LDAP database.CVE-2014-3562debian389-ds-base+132.20%12y ago21-08-2014 14:00Red Hat Directory Server 8 and 389 Directory Server, when debugging is enabled, allows remote attackers to obtain sensitive replicated metadata by searching the directory.CVE-2008-2928redhatdirectory_server6.64%18y ago29-08-2008 18:00Multiple buffer overflows in the adminutil library in CGI applications in Red Hat Directory Server 7.1 before SP7 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted Accept-Language HTTP header.CVE-2008-2929redhatdirectory_server+31.70%18y ago29-08-2008 18:00Multiple cross-site scripting (XSS) vulnerabilities in the adminutil library in the Directory Server Administration Express and Directory Server Gateway (DSGW) web interface in Red Hat Directory Server 7.1 before SP7 and 8 EL4 and EL5, and Fedora Directory Server, allow remote attackers to inject arbitrary web script or HTML via input values that use % (percent) escaping.

All vulnerabilities indirectory_server directory_server

CVE-2008-2930: fedora directory_server Resource Management Errors

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References