CVE-2011-0022

Impact:
Moderate
Public Date:
2011-02-22
Bugzilla:
671199: CVE-2011-0022 Directory Server: insecure pid file directory permissions

The MITRE CVE dictionary describes this issue as:

The setup scripts in 389 Directory Server 1.2.x (aka Red Hat Directory Server 8.2.x), when multiple unprivileged instances are configured, use 0777 permissions for the /var/run/dirsrv directory, which allows local users to cause a denial of service (daemon outage or arbitrary process termination) by replacing PID files contained in this directory.

Find out more about CVE-2011-0022 from the MITRE CVE dictionary dictionary and NIST NVD.

CVSS v2 metrics

Base Score 4.7
Base Metrics AV:L/AC:M/Au:N/C:N/I:N/A:C
Access Vector Local
Access Complexity Medium
Authentication None
Confidentiality Impact None
Integrity Impact None
Availability Impact Complete

Find out more about Red Hat support for the Common Vulnerability Scoring System (CVSS).

Red Hat Security Errata

Platform Errata Release Date
Red Hat Directory Server 8 (for RHEL 5 Server) RHSA-2011:0293 2011-02-22
Red Hat Directory Server 8.0 (for AS v. 4) RHSA-2011:0293 2011-02-22

Last Modified

CVE description copyright © 2017, The MITRE Corporation

Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.