CVE-2008-2930

2008-08-2918:41:00

CWE-399

[email protected]

web.nvd.nist.gov

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

AI Score

6.5

Confidence

High

EPSS

0.097

Percentile

94.8%

JSON

Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory Server 1.1.1 allow remote attackers to cause a denial of service (CPU consumption and search outage) via crafted LDAP search requests with patterns, related to a single-threaded regular-expression subsystem.

Affected configurations

Nvd

Node

fedoradirectory_serverMatch1.1.1

redhatdirectory_serverMatch7.1sp1

redhatdirectory_serverMatch7.1sp2

redhatdirectory_serverMatch7.1sp3

redhatdirectory_serverMatch7.1sp4

redhatdirectory_serverMatch7.1sp5

redhatdirectory_serverMatch7.1sp6

redhatdirectory_serverMatch8.0

VendorProductVersionCPE
fedoradirectory_server1.1.1cpe:2.3:a:fedora:directory_server:1.1.1:*:*:*:*:*:*:*
redhatdirectory_server7.1cpe:2.3:a:redhat:directory_server:7.1:sp1:*:*:*:*:*:*
redhatdirectory_server7.1cpe:2.3:a:redhat:directory_server:7.1:sp2:*:*:*:*:*:*
redhatdirectory_server7.1cpe:2.3:a:redhat:directory_server:7.1:sp3:*:*:*:*:*:*
redhatdirectory_server7.1cpe:2.3:a:redhat:directory_server:7.1:sp4:*:*:*:*:*:*
redhatdirectory_server7.1cpe:2.3:a:redhat:directory_server:7.1:sp5:*:*:*:*:*:*
redhatdirectory_server7.1cpe:2.3:a:redhat:directory_server:7.1:sp6:*:*:*:*:*:*
redhatdirectory_server8.0cpe:2.3:a:redhat:directory_server:8.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
fedora	directory_server	1.1.1	cpe:2.3:a:fedora:directory_server:1.1.1:::::::*
redhat	directory_server	7.1	cpe:2.3:a:redhat:directory_server:7.1:sp1::::::
redhat	directory_server	7.1	cpe:2.3:a:redhat:directory_server:7.1:sp2::::::
redhat	directory_server	7.1	cpe:2.3:a:redhat:directory_server:7.1:sp3::::::
redhat	directory_server	7.1	cpe:2.3:a:redhat:directory_server:7.1:sp4::::::
redhat	directory_server	7.1	cpe:2.3:a:redhat:directory_server:7.1:sp5::::::
redhat	directory_server	7.1	cpe:2.3:a:redhat:directory_server:7.1:sp6::::::
redhat	directory_server	8.0	cpe:2.3:a:redhat:directory_server:8.0:::::::*