CVE-2011-0022
The setup scripts in 389 Directory Server 1.2.x (aka Red Hat Directory Server 8.2.x), when...
The setup scripts in 389 Directory Server 1.2.x (aka Red Hat Directory Server 8.2.x), when multiple unprivileged instances are configured, use 0777 permissions for the /var/run/dirsrv directory, which allows local users to cause a denial of service (daemon outage or arbitrary process termination) by replacing PID files contained in this directory.
Exploit likelihood
What each source reports
NVD Score used
The setup scripts in 389 Directory Server 1.2.x (aka Red Hat Directory Server 8.2.x), when multiple unprivileged instances are configured, use 0777 permissions for the /var/run/dirsrv directory, which allows local users to cause a denial of service (daemon outage or arbitrary process termination) by replacing PID files contained in this directory.
- Record
CVE-2011-0022- CVSS 2.0
- 4.7 Medium
AV:L/AC:M/Au:N/C:N/I:N/A:C - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
The setup scripts in 389 Directory Server 1.2.x (aka Red Hat Directory Server 8.2.x), when multiple unprivileged instances are configured, use 0777 permissions for the /var/run/dirsrv directory, which allows local users to cause a denial of service (daemon outage or arbitrary process termination) by replacing PID files contained in this directory.
- Record
CVE-2011-0022- Updated
- 2026-11-02
EUVDEUVD-2011-0048 No score
The setup scripts in 389 Directory Server 1.2.x (aka Red Hat Directory Server 8.2.x), when multiple unprivileged instances are configured, use 0777 permissions for the /var/run/dirsrv directory, which allows local users to cause a denial of service (daemon outage or arbitrary process termination) by replacing PID files contained in this directory.
- Record
EUVD-2011-0048- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-89f5-968h-h37p No score
The setup scripts in 389 Directory Server 1.2.x (aka Red Hat Directory Server 8.2.x), when...
The setup scripts in 389 Directory Server 1.2.x (aka Red Hat Directory Server 8.2.x), when multiple unprivileged instances are configured, use 0777 permissions for the /var/run/dirsrv directory, which allows local users to cause a denial of service (daemon outage or arbitrary process termination) by replacing PID files contained in this directory.
- Record
GHSA-89f5-968h-h37p- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
redhat-ds-adminRed Hat:directory_server:8::el5 From an advisory covering 3 CVEs |
before 0:8.2.1-1.el5dsrv | 0:8.2.1-1.el5dsrv |
redhat-ds-admin-debuginfoRed Hat:directory_server:8::el5 From an advisory covering 3 CVEs |
before 0:8.2.1-1.el5dsrv | 0:8.2.1-1.el5dsrv |
redhat-ds-baseRed Hat:directory_server:8::el5 From an advisory covering 3 CVEs |
before 0:8.2.4-1.el5dsrv | 0:8.2.4-1.el5dsrv |
redhat-ds-base-debuginfoRed Hat:directory_server:8::el5 From an advisory covering 3 CVEs |
before 0:8.2.4-1.el5dsrv | 0:8.2.4-1.el5dsrv |
redhat-ds-base-develRed Hat:directory_server:8::el5 From an advisory covering 3 CVEs |
before 0:8.2.4-1.el5dsrv | 0:8.2.4-1.el5dsrv |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-0022 is a medium vulnerability (CVSS 4.7) in Fedoraproject 389 Directory Server, published February 23, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.29%, the 22nd percentile. No source names a fixed version.
References
securitytracker.com/id?1025102
redhat.com/support/errata/RHSA-2011-0293.html
bugzilla.redhat.com/show_bug.cgi?id=671199
securityfocus.com/bid/46489
nvd.nist.gov/vuln/detail/CVE-2011-0022
github.com/advisories/GHSA-89f5-968h-h37p
Show 14 moreShow less
access.redhat.com/errata/RHSA-2011:0293
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0293.json
cve.org/CVERecord?id=CVE-2011-0019