Description
Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack.
Affected products
- mandrakesoft / mandrake_linux6.1 – 6.1
- mandrakesoft / mandrake_linux7.0 – 7.0
- openldap / openldap1.2.8 – 1.2.8
- openldap / openldap1.2.7 – 1.2.7
- openldap / openldap1.2.9 – 1.2.9
- openldap / openldap1.2.10 – 1.2.10
- RedHat / linux6.1 – 6.1
- RedHat / linux6.1 – 6.1
- RedHat / linux6.1 – 6.1
- RedHat / linux6.2 – 6.2
- RedHat / linux6.2 – 6.2
- RedHat / linux6.2 – 6.2
- turbolinux / turbolinux4.2 – 4.2
- turbolinux / turbolinux4.4 – 4.4
- turbolinux / turbolinux6.0.2 – 6.0.2
Exploits & proofs of concept
- exploit-dbOpenLDAP 1.2.7/1.2.8/1.2.9/1.2.10 - '/usr/tmp/' Symlinkby anonymous
Updated 32m ago · 8 sources