CVE-2008-0889

Description

Red Hat Directory Server 8.0, when running on Red Hat Enterprise Linux, uses insecure permissions for the redhat-idm-console script, which allows local users to execute arbitrary code by modifying the script.

Affected products

• RedHat / directory_server8.0 – 8.0
• RedHat / directory_server8.0 – 8.0

References

• MISChttp://www.securitytracker.com/id?1019677
• MISChttp://www.redhat.com/support/errata/RHSA-2008-0191.html
• VENDOR_ADVISORYhttp://secunia.com/advisories/29482
• MISChttp://www.securityfocus.com/bid/28327