CVE-2008-3283

Description (CNA)

Multiple memory leaks in Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory Server 1.1.1 and earlier allow remote attackers to cause a denial of service (memory consumption) via vectors involving (1) the authentication / bind phase and (2) anonymous LDAP search requests.

Affected (CNA)

CWE

No CWE identifiers supplied.

References

• https://bugzilla.redhat.com/show_bug.cgi?id=458977
• http://securitytracker.com/id?1020774
• http://www.redhat.com/support/errata/RHSA-2008-0602.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44731
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01532861
• http://secunia.com/advisories/31913
• http://www.redhat.com/docs/manuals/dir-server/release-notes/7.1SP7/index.html
• http://secunia.com/advisories/31702
• https://rhn.redhat.com/errata/RHSA-2008-0596.html
• http://secunia.com/advisories/31867
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01532861
• http://www.securityfocus.com/bid/30872
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6118
• http://www.vupen.com/english/advisories/2008/2480
• https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00708.html
• http://www.redhat.com/support/errata/RHSA-2008-0858.html
• http://secunia.com/advisories/31565
• http://secunia.com/advisories/31627
• https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00521.html

ADP enrichment