Red Hat Fedora Directory Server vulnerabilities

2 CVEs affecting Red Hat Fedora Directory Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-1677, published 2008-05-12.

More from Red Hat.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2008-0892, published 2008-04-16. High severity, CVSS 9.0. EPSS: 14% chance of exploitation in the next 30 days. The replication monitor CGI script (repl-monitor-cgi.pl) in Red Hat Administration Server, as used by Red Hat Directory Server 8.0 EL4 and EL5, allows remote attackers to execute arbitrary commands.
• CVE-2008-1677, published 2008-05-12. High severity, CVSS 7.5. EPSS: 4.9% chance of exploitation in the next 30 days. Buffer overflow in the regular expression handler in Red Hat Directory Server 8.0 and 7.1 before SP6 allows remote attackers to cause a denial of service (slapd crash) and possibly execute arbitrary…