What’s Vulnerable › Vulnerabilities

CVE-2008-0889

• Severity: low (CVSS 2.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2008-03-20 · updated 2026-06-16
• Weakness: CWE-264

Description

Red Hat Directory Server 8.0, when running on Red Hat Enterprise Linux, uses insecure permissions for the redhat-idm-console script, which allows local users to execute arbitrary code by modifying the script.

Affected products

• RedHat Directory Server: 8.0-el4, 8.0-el5

References

• http://secunia.com/advisories/29482
• http://www.redhat.com/support/errata/RHSA-2008-0191.html
• http://www.securityfocus.com/bid/28327
• http://www.securitytracker.com/id?1019677
• http://secunia.com/advisories/29482
• http://www.redhat.com/support/errata/RHSA-2008-0191.html
• http://www.securityfocus.com/bid/28327
• http://www.securitytracker.com/id?1019677

Get alerted when CVE-2008-0889 or the next vulnerability affects your stack