CVEvulnerability
CVE-2000-0336
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2000-04-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N
Description
Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack.
Affected configurations
• openldap openldap 1.2.7
• openldap openldap 1.2.8
• openldap openldap 1.2.9
• openldap openldap 1.2.10
• mandrakesoft mandrake linux 6.1
• mandrakesoft mandrake linux 7.0
• redhat linux 6.1
• redhat linux 6.2
• turbolinux turbolinux 4.2
• turbolinux turbolinux 4.4
• turbolinux turbolinux 6.0.2
References
- ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-2000-009.0.txt Patch, Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2000-012.html www.redhat.com
- http://www.securityfocus.com/bid/1232 www.securityfocus.com
- http://www.turbolinux.com/pipermail/tl-security-announce/2000-May/000009.html www.turbolinux.com
- ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-2000-009.0.txt Patch, Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2000-012.html www.redhat.com
- http://www.securityfocus.com/bid/1232 www.securityfocus.com
- http://www.turbolinux.com/pipermail/tl-security-announce/2000-May/000009.html www.turbolinux.com