Untrusted search path vulnerability in OpenLDAP before 2.2.28-r3 on Gentoo Linux allows local users in the portage group to gain privileges via a malicious shared object in the Portage temporary build directory, which is part of the RUNPATH.
References
| Link | Resource |
|---|---|
| http://secunia.com/advisories/18040/ | Vendor Advisory |
| http://www.gentoo.org/security/en/glsa/glsa-200512-07.xml | Patch |
| http://www.securityfocus.com/bid/15120 | Patch |
| http://secunia.com/advisories/18040/ | Vendor Advisory |
| http://www.gentoo.org/security/en/glsa/glsa-200512-07.xml | Patch |
| http://www.securityfocus.com/bid/15120 | Patch |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 00:04
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://secunia.com/advisories/18040/ - Vendor Advisory | |
| References | () http://www.gentoo.org/security/en/glsa/glsa-200512-07.xml - Patch | |
| References | () http://www.securityfocus.com/bid/15120 - Patch |
Information
Published : 2005-12-21 02:03
Updated : 2024-11-21 00:04
NVD link : CVE-2005-4442
Mitre link : CVE-2005-4442
CVE.ORG link : CVE-2005-4442
JSON object : View
Products Affected
openldap
- openldap
CWE