NetSight
medium4.6

CVE-2000-0748

OpenLDAP 1.2.11 and earlier improperly installs the ud binary with group write permissions, which could allow any user in that group to replace the binary with…

Impact

OpenLDAP 1.2.11 and earlier improperly installs the ud binary with group write permissions, which could allow any user in that group to replace the binary with a Trojan horse.

Affected products

VendorProductAffected versions
OpenldapOpenldap
Versions 1.2.7, 1.2.8, 1.2.9, 1.2.10, 1.2.11

References