Fedora has issued an update for adminutil. This fixes some vulnerabilities, which can be exploited by malicious people to conduct cross-site scripting attacks, cause a DoS (Denial of Service), and potentially compromise a vulnerable system.

1) A boundary error within multiple Red Hat Directory Server CGI applications when processing "Accept-Language" HTTP headers can be exploited to cause a buffer overflow and potentially execute arbitrary code with "root" privileges by sending a specially crafted request to a vulnerable system.

2) Input containing the "%" character passed to the Directory Server Administration Express and Directory Server Gateway (DSGW) is not properly sanitised before being returned to the administrator. This can be exploited to execute arbitrary HTML and script code in an administrator's browser session in context of an affected site.

3) An error exists within the handling of input encoded with the "%" character. This can be exploited to cause a heap-based buffer overflow by sending specially crafted requests to certain CGI scripts.

Solution
Apply updated packages via the yum utility ("yum update adminutil").
Original Advisory
https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00218.html
https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00449.html

Deep Links
Links available in Customer Area