Unscored severity · published Mar 12, 2008
CVE-2008-0890
Red Hat Directory Server 7.1 before SP4 uses insecure permissions for certain directories, which allows local users to modify JAR files and execute arbitrary code via unknown…
–
CVSS
0.4%
EPSS
No
On KEV
Description
Red Hat Directory Server 7.1 before SP4 uses insecure permissions for certain directories, which allows local users to modify JAR files and execute arbitrary code via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 31% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DS
Directory Server · Redhat
through 7.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-0890
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-0890
secunia.com
http://secunia.com/advisories/29350
www.redhat.com
http://www.redhat.com/support/errata/RHSA-2008-0173.html
www.securityfocus.com
http://www.securityfocus.com/bid/28204
www.securitytracker.com
http://www.securitytracker.com/id?1019577
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/41152
More from Directory Server
7.5
CVE-2026-11770
389-ds-base: 389-ds-base: pre-auth ldap filter injection in cleanallruv status check
7.5
CVE-2026-15722
389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica id parsing
7.5
CVE-2026-11788
389-ds-base: 389-ds-base: null pointer dereference in deref control plugin ber parser
7.5
CVE-2026-9064
389-ds-base: 389-ds-base: unbounded ldap controls count in get_ldapmessage_controls_ext() causes cpu and heap amplification (remote dos)
7.5
CVE-2022-1949
An access control bypass vulnerability found in 389-ds-base