Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2008-0889

13
FAUCET Score

CVE-2008-0889 describes an insecure permissions vulnerability in Red Hat Directory Server 8.0 running on Red Hat Enterprise Linux. This flaw allows local users to execute arbitrary code by modifying the redhat-idm-console script. The vulnerability has a low severity CVSS score (AV:L/AC:L/Au:N/C:N/I:P/A:N), indicating local access, low attack complexity, and potential for partial integrity impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
8.0CPE matchmatch criteria
cpe:2.3:a:redhat:directory_server:8.0:el4:*:*:*:*:*:*
8.0CPE matchmatch criteria
cpe:2.3:a:redhat:directory_server:8.0:el5:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

2.1LOW

AV:L/AC:L/Au:N/C:N/I:P/A:N

Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Exploitability Score
3.9
Impact Score
2.9
CvssVersion
2.0

Exploit Intelligence

EPSS Score
0.40%
Probability of exploitation in next 30 days
EPSS Percentile
33.1%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0040 is in the 57th percentile among its peer group of 2,096 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.6 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (1)

redhatpatch availablevia redhat_api
Product: Red Hat Directory Server 8 for RHEL 5Fixed in: redhat-idm-console-0:1.0.0-17.el5idm
View patch

Vendor Advisories (1)

redhatCVE-2008-0889Important

server: insecure permissions on fedora/redhat-idm-console

Mar 19, 2008

References

secunia.com / advisories/29482
redhat.com / support/errata/RHSA-2008-0191.html
Patch
securityfocus.com / bid/28327
securitytracker.com / id