CVEvulnerability
CVE-2005-4442
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-12-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Description
Untrusted search path vulnerability in OpenLDAP before 2.2.28-r3 on Gentoo Linux allows local users in the portage group to gain privileges via a malicious shared object in the Portage temporary build directory, which is part of the RUNPATH.
Affected configurations
• openldap openldap (<= 2.2.28 r2)
• openldap openldap 2.0.0
• openldap openldap 2.0.1
• openldap openldap 2.0.2
• openldap openldap 2.0.3
• openldap openldap 2.0.4
• openldap openldap 2.0.5
• openldap openldap 2.0.6
• openldap openldap 2.0.7
• openldap openldap 2.0.8
• openldap openldap 2.0.9
• openldap openldap 2.0.10
• openldap openldap 2.0.11
• openldap openldap 2.0.12
• openldap openldap 2.0.13
• openldap openldap 2.0.14
• openldap openldap 2.0.15
• openldap openldap 2.0.16
• openldap openldap 2.0.17
• openldap openldap 2.0.18
• openldap openldap 2.0.19
• openldap openldap 2.0.20
• openldap openldap 2.0.21
• openldap openldap 2.0.22
• openldap openldap 2.0.23
• openldap openldap 2.0.24
• openldap openldap 2.0.25
• openldap openldap 2.0.26
• openldap openldap 2.0.27
• openldap openldap 2.1.2
• openldap openldap 2.1.3
• openldap openldap 2.1.4
• openldap openldap 2.1.5
• openldap openldap 2.1.6
• openldap openldap 2.1.7
• openldap openldap 2.1.8
• openldap openldap 2.1.9
• openldap openldap 2.1.10
• openldap openldap 2.1.11
• openldap openldap 2.1.12
• openldap openldap 2.1.13
• openldap openldap 2.1.14
• openldap openldap 2.1.15
• openldap openldap 2.1.16
• openldap openldap 2.1.17
• openldap openldap 2.1.18
• openldap openldap 2.1.19
• openldap openldap 2.1.20
• openldap openldap 2.1.21
• openldap openldap 2.1.22
• openldap openldap 2.1.23
• openldap openldap 2.1.24
• openldap openldap 2.1.25
• openldap openldap 2.1.26
• openldap openldap 2.1.27
• openldap openldap 2.1.28
• openldap openldap 2.1.29
• openldap openldap 2.1.30
• openldap openldap 2.2.4
• openldap openldap 2.2.5
… and 22 more
References
- http://secunia.com/advisories/18040/ Vendor Advisory
- http://www.gentoo.org/security/en/glsa/glsa-200512-07.xml Patch
- http://www.securityfocus.com/bid/15120 Patch
- http://secunia.com/advisories/18040/ Vendor Advisory
- http://www.gentoo.org/security/en/glsa/glsa-200512-07.xml Patch
- http://www.securityfocus.com/bid/15120 Patch