A vulnerability was found in OpenLDAP 1.2.7/1.2.8/1.2.9/1.2.10 (Directory Service Software). It has been rated as problematic. This issue affects some unknown functionality of the file /usr/tmp/. The manipulation with an unknown input leads to a symlink vulnerability. Using CWE to declare the problem leads to CWE-61. The product, when opening a file or directory, does not sufficiently account for when the file is a symbolic link that resolves to a target outside of the intended control sphere. This could allow an attacker to cause the product to operate on unauthorized files. Impacted is integrity. The summary by CVE is:

Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack.

The weakness was shared 04/21/2000 with Redhat as not defined advisory (Website). It is possible to read the advisory at ftp.calderasystems.com. The identification of this vulnerability is CVE-2000-0336. The exploitation is known to be easy. Attacking locally is a requirement. No form of authentication is needed for a successful exploitation. Technical details of the vulnerability are known, but there is no available exploit.

The vulnerability scanner Nessus provides a plugin with the ID 61801 (Mandrake Linux Security Advisory : openldap (MDKSA-2000:003)), which helps to determine the existence of the flaw in a target environment. It is assigned to the family Mandriva Local Security Checks and running in the context l.

Upgrading eliminates this vulnerability. A possible mitigation has been published 1 days after the disclosure of the vulnerability.

The vulnerability is also documented in the vulnerability database at Tenable (61801).

Productinfo

Type

• Directory Service Software

Name

• OpenLDAP

Version

• 1.2.7
• 1.2.8
• 1.2.9
• 1.2.10

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion