PT-2000-1680 · Openldap · Openldap

Publicado 2000-10-20 · Atualizado 2008-09-05 · CVE-2000-0748

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions OpenLDAP versions 1.2.11 and earlier

Description The issue is related to improper installation of the ud binary with group write permissions. This could allow any user in that group to replace the binary with a malicious version, potentially leading to unauthorized access or data compromise.

Recommendations For OpenLDAP versions 1.2.11 and earlier, update the permissions of the ud binary to prevent group write access. Ensure that the binary is installed with secure permissions to prevent tampering.

Correção

Identificadores relacionados

CVE-2000-0748

Produtos afetados

Openldap

Referências · 3

• http://securityfocus.com/bid/1511 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2000-0748 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2000-07/0375.html · Aviso do Fabricante