:A vulnerability has been reported in Red Hat Directory Server, which can be exploited by malicious, local users to gain escalated privileges.The vulnerability is caused due to insecure permissions being set for the "/opt/redhat-ds/java/jars" directory. This can be exploited by a malicious, local user to replace ".jar" archives and execute arbitrary code.The vulnerability is reported in version 7.1 prior to Service Pack 4.Solution:The vendor has fixed the vulnerability in Red Hat Directory Server 7.1 Service Pack 4, which is available via Red Hat Network.http://rhn.redhat.com/Provided and/or discovered by:Reported by the vendor.Original Advisory:http://rhn.redhat.com/errata/RHSA-2008-0173.html

Original post by manisha