high7.2Public exploit code
CVE-2000-0516
When configured to store configuration information in an LDAP directory, Shiva Access Manager 5.0.0 stores the root DN (Distinguished Name) name and password i…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Intel Corporation Shiva Access Manager 5.0 - Solaris World Readable LDAP Password2000-06-06 · local · solaris · Verified
Impact
When configured to store configuration information in an LDAP directory, Shiva Access Manager 5.0.0 stores the root DN (Distinguished Name) name and password in cleartext in a file that is world readable, which allows local users to compromise the LDAP server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Intel | Shiva Access Manager | Version 5.0 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2000-06/0008.html
- http://www.securityfocus.com/bid/1329
- https://exchange.xforce.ibmcloud.com/vulnerabilities/4612
- http://archives.neohapsis.com/archives/bugtraq/2000-06/0008.html
- http://www.securityfocus.com/bid/1329
- https://exchange.xforce.ibmcloud.com/vulnerabilities/4612