csaf_redhat - RHSA-2008:0199

RHSA-2008:0199

Vulnerability from csaf_redhat

Published

2008-04-15 21:10

Modified

2024-11-14 10:06

Summary

Red Hat Security Advisory: Red Hat Directory Server 7.1 Service Pack 5 security update

Notes

Topic

An updated redhat-ds package that addresses a security issue is now available as Red Hat Directory Server 7.1, Service Pack 5. This update has been rated as having important security impact by the Red Hat Security Response Team.

Details

Red Hat Directory Server is an LDAPv3-compliant directory server. A shell command injection flaw was discovered in the Red Hat Administration Server replication monitor CGI script used by Red Hat Directory Server 7.1. An attacker with access to the replication monitor web page could execute arbitrary shell commands with the "root" user privileges used by Administration Server. (CVE-2008-0892) Please note: simply installing the updated package does not correct the security issue for previously created instances of the Administration Server. After installation, the following steps must be manually performed to resolve the security issue: # cd /opt/redhat-ds # ./setup/setup -r For more information about Service Pack 5, including upgrade and installation instructions for users running Red Hat Directory Server 7.1 on Solaris, please refer to the Red Hat Directory Server 7.1 SP5 release notes, available at: http://www.redhat.com/docs/manuals/dir-server/release-notes/7.1SP5/ All users of Red Hat Directory Server 7.1 should upgrade to Service Pack 5, which resolves this issue.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An updated redhat-ds package that addresses a security issue is now\navailable as Red Hat Directory Server 7.1, Service Pack 5.\n\nThis update has been rated as having important security impact by the Red\nHat Security Response Team.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat Directory Server is an LDAPv3-compliant directory server.\n\nA shell command injection flaw was discovered in the Red Hat Administration\nServer replication monitor CGI script used by Red Hat Directory Server 7.1.\nAn attacker with access to the replication monitor web page could execute\narbitrary shell commands with the \"root\" user privileges used by\nAdministration Server. (CVE-2008-0892)\n\nPlease note: simply installing the updated package does not correct the\nsecurity issue for previously created instances of the Administration\nServer. After installation, the following steps must be manually performed\nto resolve the security issue:\n\n# cd /opt/redhat-ds\n# ./setup/setup -r\n\nFor more information about Service Pack 5, including upgrade and\ninstallation instructions for users running Red Hat Directory Server 7.1 on\nSolaris, please refer to the Red Hat Directory Server 7.1 SP5 release\nnotes, available at:\n\nhttp://www.redhat.com/docs/manuals/dir-server/release-notes/7.1SP5/\n\nAll users of Red Hat Directory Server 7.1 should upgrade to Service Pack 5,\nwhich resolves this issue.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2008:0199",
        "url": "https://access.redhat.com/errata/RHSA-2008:0199"
      },
      {
        "category": "external",
        "summary": "http://www.redhat.com/security/updates/classification/#important",
        "url": "http://www.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "437301",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=437301"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0199.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Directory Server 7.1 Service Pack 5 security update",
    "tracking": {
      "current_release_date": "2024-11-14T10:06:00+00:00",
      "generator": {
        "date": "2024-11-14T10:06:00+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.0"
        }
      },
      "id": "RHSA-2008:0199",
      "initial_release_date": "2008-04-15T21:10:00+00:00",
      "revision_history": [
        {
          "date": "2008-04-15T21:10:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2008-04-15T17:10:47+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-14T10:06:00+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Directory Server 7.1 (for AS v. 3)",
                "product": {
                  "name": "Red Hat Directory Server 7.1 (for AS v. 3)",
                  "product_id": "3AS-DirServ",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:directory_server:7.1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Directory Server 7.1 (for ES v. 3)",
                "product": {
                  "name": "Red Hat Directory Server 7.1 (for ES v. 3)",
                  "product_id": "3ES-DirServ",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:directory_server:7.1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "RHEL 4 Directory Server AS",
                "product": {
                  "name": "RHEL 4 Directory Server AS",
                  "product_id": "4AS-DirServ",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:directory_server:7.1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "RHEL 4 Directory Server ES",
                "product": {
                  "name": "RHEL 4 Directory Server ES",
                  "product_id": "4ES-DirServ",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:directory_server:7.1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Directory Server"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "redhat-ds-0:7.1SP5-8.RHEL3.src",
                "product": {
                  "name": "redhat-ds-0:7.1SP5-8.RHEL3.src",
                  "product_id": "redhat-ds-0:7.1SP5-8.RHEL3.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/redhat-ds@7.1SP5-8.RHEL3?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "redhat-ds-0:7.1SP5-8.RHEL4.src",
                "product": {
                  "name": "redhat-ds-0:7.1SP5-8.RHEL4.src",
                  "product_id": "redhat-ds-0:7.1SP5-8.RHEL4.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/redhat-ds@7.1SP5-8.RHEL4?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "redhat-ds-0:7.1SP5-8.RHEL3.i386",
                "product": {
                  "name": "redhat-ds-0:7.1SP5-8.RHEL3.i386",
                  "product_id": "redhat-ds-0:7.1SP5-8.RHEL3.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/redhat-ds@7.1SP5-8.RHEL3?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "redhat-ds-0:7.1SP5-8.RHEL4.i386",
                "product": {
                  "name": "redhat-ds-0:7.1SP5-8.RHEL4.i386",
                  "product_id": "redhat-ds-0:7.1SP5-8.RHEL4.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/redhat-ds@7.1SP5-8.RHEL4?arch=i386"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "redhat-ds-0:7.1SP5-8.RHEL3.i386 as a component of Red Hat Directory Server 7.1 (for AS v. 3)",
          "product_id": "3AS-DirServ:redhat-ds-0:7.1SP5-8.RHEL3.i386"
        },
        "product_reference": "redhat-ds-0:7.1SP5-8.RHEL3.i386",
        "relates_to_product_reference": "3AS-DirServ"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "redhat-ds-0:7.1SP5-8.RHEL3.src as a component of Red Hat Directory Server 7.1 (for AS v. 3)",
          "product_id": "3AS-DirServ:redhat-ds-0:7.1SP5-8.RHEL3.src"
        },
        "product_reference": "redhat-ds-0:7.1SP5-8.RHEL3.src",
        "relates_to_product_reference": "3AS-DirServ"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "redhat-ds-0:7.1SP5-8.RHEL3.i386 as a component of Red Hat Directory Server 7.1 (for ES v. 3)",
          "product_id": "3ES-DirServ:redhat-ds-0:7.1SP5-8.RHEL3.i386"
        },
        "product_reference": "redhat-ds-0:7.1SP5-8.RHEL3.i386",
        "relates_to_product_reference": "3ES-DirServ"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "redhat-ds-0:7.1SP5-8.RHEL3.src as a component of Red Hat Directory Server 7.1 (for ES v. 3)",
          "product_id": "3ES-DirServ:redhat-ds-0:7.1SP5-8.RHEL3.src"
        },
        "product_reference": "redhat-ds-0:7.1SP5-8.RHEL3.src",
        "relates_to_product_reference": "3ES-DirServ"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "redhat-ds-0:7.1SP5-8.RHEL4.i386 as a component of RHEL 4 Directory Server AS",
          "product_id": "4AS-DirServ:redhat-ds-0:7.1SP5-8.RHEL4.i386"
        },
        "product_reference": "redhat-ds-0:7.1SP5-8.RHEL4.i386",
        "relates_to_product_reference": "4AS-DirServ"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "redhat-ds-0:7.1SP5-8.RHEL4.src as a component of RHEL 4 Directory Server AS",
          "product_id": "4AS-DirServ:redhat-ds-0:7.1SP5-8.RHEL4.src"
        },
        "product_reference": "redhat-ds-0:7.1SP5-8.RHEL4.src",
        "relates_to_product_reference": "4AS-DirServ"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "redhat-ds-0:7.1SP5-8.RHEL4.i386 as a component of RHEL 4 Directory Server ES",
          "product_id": "4ES-DirServ:redhat-ds-0:7.1SP5-8.RHEL4.i386"
        },
        "product_reference": "redhat-ds-0:7.1SP5-8.RHEL4.i386",
        "relates_to_product_reference": "4ES-DirServ"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "redhat-ds-0:7.1SP5-8.RHEL4.src as a component of RHEL 4 Directory Server ES",
          "product_id": "4ES-DirServ:redhat-ds-0:7.1SP5-8.RHEL4.src"
        },
        "product_reference": "redhat-ds-0:7.1SP5-8.RHEL4.src",
        "relates_to_product_reference": "4ES-DirServ"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2008-0892",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "discovery_date": "2008-03-12T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "437301"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The replication monitor CGI script (repl-monitor-cgi.pl) in Red Hat Administration Server, as used by Red Hat Directory Server 8.0 EL4 and EL5, allows remote attackers to execute arbitrary commands.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Server: shell command injection in CGI replication monitor",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-DirServ:redhat-ds-0:7.1SP5-8.RHEL3.i386",
          "3AS-DirServ:redhat-ds-0:7.1SP5-8.RHEL3.src",
          "3ES-DirServ:redhat-ds-0:7.1SP5-8.RHEL3.i386",
          "3ES-DirServ:redhat-ds-0:7.1SP5-8.RHEL3.src",
          "4AS-DirServ:redhat-ds-0:7.1SP5-8.RHEL4.i386",
          "4AS-DirServ:redhat-ds-0:7.1SP5-8.RHEL4.src",
          "4ES-DirServ:redhat-ds-0:7.1SP5-8.RHEL4.i386",
          "4ES-DirServ:redhat-ds-0:7.1SP5-8.RHEL4.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-0892"
        },
        {
          "category": "external",
          "summary": "RHBZ#437301",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=437301"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-0892",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-0892"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-0892",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-0892"
        }
      ],
      "release_date": "2008-04-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-04-15T21:10:00+00:00",
          "details": "This update is available via Red Hat Network.\n\nUsers running Red Hat Directory Server 7.1 on Red Hat Enterprise Linux\nshould consult the following Knowledge Base article for instruction on how\nto install updated RPM packages: http://kbase.redhat.com/faq/FAQ_58_10188\n\nUsers running Red Hat Directory Server 7.1 on Solaris should consult the\nService Pack 5 release notes (see above for URL) for installation and\nupgrade instructions.",
          "product_ids": [
            "3AS-DirServ:redhat-ds-0:7.1SP5-8.RHEL3.i386",
            "3AS-DirServ:redhat-ds-0:7.1SP5-8.RHEL3.src",
            "3ES-DirServ:redhat-ds-0:7.1SP5-8.RHEL3.i386",
            "3ES-DirServ:redhat-ds-0:7.1SP5-8.RHEL3.src",
            "4AS-DirServ:redhat-ds-0:7.1SP5-8.RHEL4.i386",
            "4AS-DirServ:redhat-ds-0:7.1SP5-8.RHEL4.src",
            "4ES-DirServ:redhat-ds-0:7.1SP5-8.RHEL4.i386",
            "4ES-DirServ:redhat-ds-0:7.1SP5-8.RHEL4.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0199"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "SINGLE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.7,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:A/AC:L/Au:S/C:C/I:C/A:C",
            "version": "2.0"
          },
          "products": [
            "3AS-DirServ:redhat-ds-0:7.1SP5-8.RHEL3.i386",
            "3AS-DirServ:redhat-ds-0:7.1SP5-8.RHEL3.src",
            "3ES-DirServ:redhat-ds-0:7.1SP5-8.RHEL3.i386",
            "3ES-DirServ:redhat-ds-0:7.1SP5-8.RHEL3.src",
            "4AS-DirServ:redhat-ds-0:7.1SP5-8.RHEL4.i386",
            "4AS-DirServ:redhat-ds-0:7.1SP5-8.RHEL4.src",
            "4ES-DirServ:redhat-ds-0:7.1SP5-8.RHEL4.i386",
            "4ES-DirServ:redhat-ds-0:7.1SP5-8.RHEL4.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Server: shell command injection in CGI replication monitor"
    }
  ]
}

cve-2008-0892

Vulnerability from cvelistv5

Published

2008-04-16 18:00

Modified

2024-08-07 08:01

Severity ?

Summary

The replication monitor CGI script (repl-monitor-cgi.pl) in Red Hat Administration Server, as used by Red Hat Directory Server 8.0 EL4 and EL5, allows remote attackers to execute arbitrary commands.

References

▼	URL	Tags
	https://exchange.xforce.ibmcloud.com/vulnerabilities/41840	vdb-entry, x_refsource_XF
	https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00386.html	vendor-advisory, x_refsource_FEDORA
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01433676	vendor-advisory, x_refsource_HP
	http://secunia.com/advisories/30114	third-party-advisory, x_refsource_SECUNIA
	http://www.securitytracker.com/id?1019856	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/28802	vdb-entry, x_refsource_BID
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01433676	vendor-advisory, x_refsource_HP
	http://www.redhat.com/support/errata/RHSA-2008-0201.html	vendor-advisory, x_refsource_REDHAT
	https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00380.html	vendor-advisory, x_refsource_FEDORA
	http://www.vupen.com/english/advisories/2008/1449/references	vdb-entry, x_refsource_VUPEN
	http://www.redhat.com/support/errata/RHSA-2008-0199.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/29761	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/29826	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.redhat.com/show_bug.cgi?id=437301	x_refsource_CONFIRM

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T08:01:40.080Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "rhds-replmonitor-command-execution(41840)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41840"
          },
          {
            "name": "FEDORA-2008-3220",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00386.html"
          },
          {
            "name": "HPSBUX02324",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01433676"
          },
          {
            "name": "30114",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30114"
          },
          {
            "name": "1019856",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1019856"
          },
          {
            "name": "28802",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/28802"
          },
          {
            "name": "SSRT080034",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01433676"
          },
          {
            "name": "RHSA-2008:0201",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0201.html"
          },
          {
            "name": "FEDORA-2008-3214",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00380.html"
          },
          {
            "name": "ADV-2008-1449",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/1449/references"
          },
          {
            "name": "RHSA-2008:0199",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0199.html"
          },
          {
            "name": "29761",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29761"
          },
          {
            "name": "29826",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29826"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=437301"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-04-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The replication monitor CGI script (repl-monitor-cgi.pl) in Red Hat Administration Server, as used by Red Hat Directory Server 8.0 EL4 and EL5, allows remote attackers to execute arbitrary commands."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-07T12:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "rhds-replmonitor-command-execution(41840)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41840"
        },
        {
          "name": "FEDORA-2008-3220",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00386.html"
        },
        {
          "name": "HPSBUX02324",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01433676"
        },
        {
          "name": "30114",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30114"
        },
        {
          "name": "1019856",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1019856"
        },
        {
          "name": "28802",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/28802"
        },
        {
          "name": "SSRT080034",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01433676"
        },
        {
          "name": "RHSA-2008:0201",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0201.html"
        },
        {
          "name": "FEDORA-2008-3214",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00380.html"
        },
        {
          "name": "ADV-2008-1449",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/1449/references"
        },
        {
          "name": "RHSA-2008:0199",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0199.html"
        },
        {
          "name": "29761",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29761"
        },
        {
          "name": "29826",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29826"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=437301"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2008-0892",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The replication monitor CGI script (repl-monitor-cgi.pl) in Red Hat Administration Server, as used by Red Hat Directory Server 8.0 EL4 and EL5, allows remote attackers to execute arbitrary commands."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "rhds-replmonitor-command-execution(41840)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41840"
            },
            {
              "name": "FEDORA-2008-3220",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00386.html"
            },
            {
              "name": "HPSBUX02324",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01433676"
            },
            {
              "name": "30114",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30114"
            },
            {
              "name": "1019856",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1019856"
            },
            {
              "name": "28802",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/28802"
            },
            {
              "name": "SSRT080034",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01433676"
            },
            {
              "name": "RHSA-2008:0201",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0201.html"
            },
            {
              "name": "FEDORA-2008-3214",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00380.html"
            },
            {
              "name": "ADV-2008-1449",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/1449/references"
            },
            {
              "name": "RHSA-2008:0199",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0199.html"
            },
            {
              "name": "29761",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29761"
            },
            {
              "name": "29826",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29826"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=437301",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=437301"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2008-0892",
    "datePublished": "2008-04-16T18:00:00",
    "dateReserved": "2008-02-21T00:00:00",
    "dateUpdated": "2024-08-07T08:01:40.080Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted