CVE-2008-2928: Red Hat Directory Server

High severity, CVSS 10.0. EPSS: 6.6% chance of exploitation in the next 30 days.

Multiple buffer overflows in the adminutil library in CGI applications in Red Hat Directory Server 7.1 before SP7 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted Accept-Language HTTP header.

Affected products

• Red Hat Directory Server: version 7.1 only

Published 2008-08-29. Last modified 2026-06-16.