PT-2000-1680 · Openldap · Openldap

Published 2000-10-20 · Updated 2008-09-05 · CVE-2000-0748

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions OpenLDAP versions 1.2.11 and earlier

Description The issue is related to improper installation of the ud binary with group write permissions. This could allow any user in that group to replace the binary with a malicious version, potentially leading to unauthorized access or data compromise.

Recommendations For OpenLDAP versions 1.2.11 and earlier, update the permissions of the ud binary to prevent group write access. Ensure that the binary is installed with secure permissions to prevent tampering.

Fix

Related Identifiers

CVE-2000-0748

Affected Products

Openldap

References · 3

• http://securityfocus.com/bid/1511 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2000-0748 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2000-07/0375.html · Vendor Advisory