PT-2011-2426 · Red Hat · 389 Directory Server

Tomas Hoger · Publicado 2011-02-23 · Atualizado 2017-08-17 · CVE-2011-0532

Positive Technologies (AI Summary)

CVSS v2.0

6.2

Média

Vetor base

AV:L/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions 389 Directory Server versions 1.2.x

Description The issue concerns the backup and restore scripts, main initialization script, and ldap-agent script in 389 Directory Server. These scripts place a zero-length directory name in the LD LIBRARY PATH, allowing local users to gain privileges via a Trojan horse shared library in the current working directory.

Recommendations For versions 1.2.x, consider restricting access to the vulnerable scripts as a temporary workaround until a patch is available. Additionally, avoid using shared libraries in the current working directory to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2011-0532

RHSA-2011:0293

Produtos afetados

389 Directory Server

Referências · 6

• http://securitytracker.com/id?1025102 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=672468 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65637 · Nota
• http://securityfocus.com/bid/46489 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-0532 · Nota de Segurança
• http://redhat.com/support/errata/RHSA-2011-0293.html · Aviso do Fabricante