CVE-2011-1067: slapd (aka ns-slapd) in 389 Directory Server before 1.2.8.a2 does not properly manage the c_timelimit field...

Security readout for executives and security teams

CVE-2011-1067 is a denial-of-service issue in 389 Directory Server. A remote attacker could cause the directory daemon to stop by abusing Simple Paged Results connection handling. Business impact is service outage for authentication or directory-backed applications, not data theft based on the provided sources. Exposure is most likely in older 389 Directory Server deployments before 1.2.8.a2, including directory services reachable by untrusted networks. The bundle does not provide CPEs, package names, or a complete affected-product matrix, so version confirmation is required. Prioritize if legacy directory services support authentication, identity lookup, or business-critical applications. The issue is outage-focused and old, but unpatched internet- or partner-facing directory services can still create operational risk. Mitigation focus: Identify any 389 Directory Server instances older than 1.2.8.a2.; Review Red Hat and 389 Directory Server guidance for fixed packages.; Upgrade affected deployments to a vendor-supported fixed release..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.