CVE-2008-0890

Red Hat Directory Server 7.1 before SP4 uses insecure permissions for certain directories, which...

4.6 MediumFix available

Red Hat Directory Server 7.1 before SP4 uses insecure permissions for certain directories, which allows local users to modify JAR files and execute arbitrary code via unknown vectors.

Exploit likelihood

0.37%Down 1.2 points since Feb 4, 2022

What each source reports

NVD Score used 4.6

Red Hat Directory Server 7.1 before SP4 uses insecure permissions for certain directories, which allows local users to modify JAR files and execute arbitrary code via unknown vectors.

Record: CVE-2008-0890
CVSS 2.0: 4.6 MediumAV:L/AC:L/Au:N/C:P/I:P/A:P
Weakness: CWE-264
Updated: 2026-11-02

CVE List No score

Red Hat Directory Server 7.1 before SP4 uses insecure permissions for certain directories, which allows local users to modify JAR files and execute arbitrary code via unknown vectors.

Record: CVE-2008-0890
Updated: 2026-11-02

EUVDEUVD-2008-0897 No score

Red Hat Directory Server 7.1 before SP4 uses insecure permissions for certain directories, which allows local users to modify JAR files and execute arbitrary code via unknown vectors.

Record: EUVD-2008-0897
Updated: 2026-11-03

GitHub AdvisoriesGHSA-pj65-cvc7-46r9 No score

Red Hat Directory Server 7.1 before SP4 uses insecure permissions for certain directories, which...

Red Hat Directory Server 7.1 before SP4 uses insecure permissions for certain directories, which allows local users to modify JAR files and execute arbitrary code via unknown vectors.

Record: GHSA-pj65-cvc7-46r9
Updated: 2026-11-02

Affected products

redhat directory server

Affected packages

Affected packages
Package	Affected	Fixed
`redhat-ds` Red Hat:directory_server:7.1	before 0:7.1SP4-7.RHEL4	0:7.1SP4-7.RHEL4

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-0890 is a medium vulnerability (CVSS 4.6) in Redhat Directory Server, published March 12, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.37%, the 31st percentile. Fixed in redhat-ds 0:7.1SP4-7.RHEL4.

References

Show 8 moreShow less