Unscored severity · published Apr 16, 2008
CVE-2008-0893
Red Hat Administration Server, as used by Red Hat Directory Server 8.0 EL4 and EL5, does not properly restrict access to CGI scripts, which allows remote attackers to perform…
–
CVSS
2%
EPSS
No
On KEV
Description
Red Hat Administration Server, as used by Red Hat Directory Server 8.0 EL4 and EL5, does not properly restrict access to CGI scripts, which allows remote attackers to perform administrative actions.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DS
Directory Server · Redhat
8.0; 8.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-0893
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-0893
Vendor Advisory
http://secunia.com/advisories/29761
secunia.com
http://secunia.com/advisories/29826
Patch
http://www.redhat.com/support/errata/RHSA-2008-0201.html
www.securityfocus.com
http://www.securityfocus.com/bid/28802
www.securitytracker.com
http://www.securitytracker.com/id?1019857
bugzilla.redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=437320
More from Directory Server
7.5
CVE-2026-11770
389-ds-base: 389-ds-base: pre-auth ldap filter injection in cleanallruv status check
7.5
CVE-2026-15722
389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica id parsing
7.5
CVE-2026-11788
389-ds-base: 389-ds-base: null pointer dereference in deref control plugin ber parser
7.5
CVE-2026-9064
389-ds-base: 389-ds-base: unbounded ldap controls count in get_ldapmessage_controls_ext() causes cpu and heap amplification (remote dos)
7.5
CVE-2022-1949
An access control bypass vulnerability found in 389-ds-base