Vulnerability in Openldap

CVE-2000-0748

OpenLDAP 1.2.11 and earlier improperly installs the ud binary with group write permissions, which could allow any user in that group to replace the binary with a Trojan horse.

EPSS: 0.004 (27.9th percentile) — read the EPSS interpretation.

Affected products

  • Openldap — versions 1.2.7, 1.2.8, 1.2.9
  • N/a — versions n/a

References

  • cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ, Patch)
  • cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)