CVE-2011-0019

Name of the Vulnerable Software and Affected Versions 389 Directory Server version 1.2.7.5

Description The issue is related to the handling of simple paged result searches by the slapd component in 389 Directory Server. This can be exploited by remote attackers to cause a denial of service, resulting in a daemon crash, or potentially have other unspecified impacts. This can be achieved through the submission of multiple search requests.

Recommendations For version 1.2.7.5, consider restricting access to the simple paged result search functionality until a patch is available. As a temporary workaround, limiting the number of concurrent search requests may help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.