CVE-2011-1067: Fedoraproject 389 Directory Server

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

slapd (aka ns-slapd) in 389 Directory Server before 1.2.8.a2 does not properly manage the c_timelimit field of the connection table element, which allows remote attackers to cause a denial of service (daemon outage) via Simple Paged Results connections, as demonstrated by using multiple processes to replay TCP sessions, a different vulnerability than CVE-2011-0019.

Affected products

• Fedoraproject 389 Directory Server: up to and including 1.2.8; version 1.2.1 only; version 1.2.2 only; version 1.2.3 only; version 1.2.5 only; version 1.2.6 only; …

Published 2011-02-23. Last modified 2026-06-16.