CVE-2008-2928
Multiple buffer overflows in the adminutil library in CGI applications in Red Hat Directory...
CVE-2008-2928 is a high vulnerability (CVSS 10.0) in Redhat Directory Server, published August 29, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.64%, the 93rd percentile. No source names a fixed version.
- Severity
- 10.0 HighCVSS 2.0, NVD
- Exploit chance
- 6.64%EPSS, 93rd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Multiple buffer overflows in the adminutil library in CGI applications in Red Hat Directory Server 7.1 before SP7 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted Accept-Language HTTP header.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
redhat-dsRed Hat:directory_server:7.1 From an advisory covering 4 CVEs | before 0:7.1SP7-14.RHEL4 | 0:7.1SP7-14.RHEL4 |
What each source reports
NVD Score used
Multiple buffer overflows in the adminutil library in CGI applications in Red Hat Directory Server 7.1 before SP7 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted Accept-Language HTTP header.
- Record
CVE-2008-2928- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE ListNo score
Multiple buffer overflows in the adminutil library in CGI applications in Red Hat Directory Server 7.1 before SP7 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted Accept-Language HTTP header.
- Record
CVE-2008-2928- Updated
- 2026-11-02
EUVDEUVD-2008-2921No score
Multiple buffer overflows in the adminutil library in CGI applications in Red Hat Directory Server 7.1 before SP7 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted Accept-Language HTTP header.
- Record
EUVD-2008-2921- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fprm-74q4-pj4wNo score
Multiple buffer overflows in the adminutil library in CGI applications in Red Hat Directory...
Multiple buffer overflows in the adminutil library in CGI applications in Red Hat Directory Server 7.1 before SP7 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted Accept-Language HTTP header.
- Record
GHSA-fprm-74q4-pj4w- Weakness
- CWE-119
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
bugzilla.redhat.com/show_bug.cgi?id=453916
securitytracker.com/id?1020771
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01532861
redhat.com/docs/manuals/dir-server/release-notes/7.1SP7/index.html
secunia.com/advisories/31702
rhn.redhat.com/errata/RHSA-2008-0596.html
Show 27 moreShow less
securityfocus.com/bid/30869
vupen.com/english/advisories/2008/2480
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5865
exchange.xforce.ibmcloud.com/vulnerabilities/44738
nvd.nist.gov/vuln/detail/CVE-2008-2928
github.com/advisories/GHSA-fprm-74q4-pj4w
access.redhat.com/errata/RHSA-2008:0596
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0596.json
cve.org/CVERecord?id=CVE-2008-2928