CVE-2010-2241

The (1) setup-ds.pl and (2) setup-ds-admin.pl setup scripts for Red Hat Directory Server 8 before...

2.1 LowFix available

The (1) setup-ds.pl and (2) setup-ds-admin.pl setup scripts for Red Hat Directory Server 8 before 8.2 use world-readable permissions when creating cache files, which allows local users to obtain sensitive information including passwords for Directory and Administration Server administrative accounts.

Exploit likelihood

0.35%Down 0.6 points since Feb 4, 2022

What each source reports

NVD Score used 2.1

Record: CVE-2010-2241
CVSS 2.0: 2.1 LowAV:L/AC:L/Au:N/C:P/I:N/A:N
Weakness: CWE-264
Updated: 2026-11-02

CVE List No score

Record: CVE-2010-2241
Updated: 2026-11-02

EUVDEUVD-2010-2253 No score

Record: EUVD-2010-2253
Updated: 2026-11-03

GitHub AdvisoriesGHSA-g8wm-c6h5-35rm No score

The (1) setup-ds.pl and (2) setup-ds-admin.pl setup scripts for Red Hat Directory Server 8 before...

Record: GHSA-g8wm-c6h5-35rm
Updated: 2026-11-02

Affected products

redhat directory server

Affected packages

Affected packages
Package	Affected	Fixed
`idm-console-framework` Red Hat:directory_server:8::el5	before 0:1.1.5-1.el5idm	0:1.1.5-1.el5idm
`jss` Red Hat:directory_server:8::el5	before 0:4.2.6-6.el5idm	0:4.2.6-6.el5idm
`jss-debuginfo` Red Hat:directory_server:8::el5	before 0:4.2.6-6.el5idm	0:4.2.6-6.el5idm
`redhat-admin-console` Red Hat:directory_server:8::el5	before 0:8.2.0-2.el5dsrv	0:8.2.0-2.el5dsrv
`redhat-ds` Red Hat:directory_server:8::el5	before 0:8.2.0-2.el5dsrv	0:8.2.0-2.el5dsrv
`redhat-ds-admin` Red Hat:directory_server:8::el5	before 0:8.2.0-3.el5dsrv	0:8.2.0-3.el5dsrv
`redhat-ds-admin-debuginfo` Red Hat:directory_server:8::el5	before 0:8.2.0-3.el5dsrv	0:8.2.0-3.el5dsrv
`redhat-ds-base` Red Hat:directory_server:8::el5	before 0:8.2.0-13.el5dsrv	0:8.2.0-13.el5dsrv
`redhat-ds-base-debuginfo` Red Hat:directory_server:8::el5	before 0:8.2.0-13.el5dsrv	0:8.2.0-13.el5dsrv
`redhat-ds-base-devel` Red Hat:directory_server:8::el5	before 0:8.2.0-13.el5dsrv	0:8.2.0-13.el5dsrv
`redhat-ds-console` Red Hat:directory_server:8::el5	before 0:8.2.0-4.el5dsrv	0:8.2.0-4.el5dsrv
`redhat-idm-console` Red Hat:directory_server:8::el5	before 0:1.0.2-1.el5idm	0:1.0.2-1.el5idm
`redhat-idm-console-debuginfo` Red Hat:directory_server:8::el5	before 0:1.0.2-1.el5idm	0:1.0.2-1.el5idm

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2010-2241 is a low vulnerability (CVSS 2.1) in Redhat Directory Server, published August 17, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.35%, the 28th percentile. Fixed in idm-console-framework 0:1.1.5-1.el5idm.

References

Show 7 moreShow less