low2.1Public exploit code
CVE-2000-0336
Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- OpenLDAP 1.2.7/1.2.8/1.2.9/1.2.10 - '/usr/tmp/' Symlink2000-04-21 · local · linux · Verified
Impact
Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openldap | Openldap | Versions 1.2.7, 1.2.8, 1.2.9, 1.2.10 |
| Mandrakesoft | Mandrake Linux | Versions 6.1, 7.0 |
| Redhat | Linux | Versions 6.1, 6.2 |
| Turbolinux | Turbolinux | Versions 4.2, 4.4, 6.0.2 |
References
- NVD record
- CVE.org record
- http://www.redhat.com/support/errata/RHSA-2000-012.html
- http://www.securityfocus.com/bid/1232
- http://www.turbolinux.com/pipermail/tl-security-announce/2000-May/000009.html
- http://www.redhat.com/support/errata/RHSA-2000-012.html
- http://www.securityfocus.com/bid/1232
- http://www.turbolinux.com/pipermail/tl-security-announce/2000-May/000009.html