CVEvulnerability
CVE-2006-7191
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-04-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Description
Untrusted search path vulnerability in lamdaemon.pl in LDAP Account Manager (LAM) before 1.0.0 allows local users to gain privileges via a modified PATH that points to a malicious rm program.
Affected configurations
• ldap account manager ldap account manager (<= 1.0 rc2)
Related
Referenced by CWE · observed example (1)
- CWE-642 External Control of Critical State Data weakness
References
- http://lam.cvs.sourceforge.net/lam/lam/lib/lamdaemon.pl lam.cvs.sourceforge.net
- http://lam.cvs.sourceforge.net/lam/lam/lib/lamdaemon.pl?r1=1.32&r2=1.33 lam.cvs.sourceforge.net
- http://lam.sourceforge.net/changelog/index.htm lam.sourceforge.net
- http://secunia.com/advisories/25157 secunia.com
- http://www.securityfocus.com/bid/23857 www.securityfocus.com
- http://www.us.debian.org/security/2007/dsa-1287 www.us.debian.org
- http://lam.cvs.sourceforge.net/lam/lam/lib/lamdaemon.pl lam.cvs.sourceforge.net
- http://lam.cvs.sourceforge.net/lam/lam/lib/lamdaemon.pl?r1=1.32&r2=1.33 lam.cvs.sourceforge.net
- http://lam.sourceforge.net/changelog/index.htm lam.sourceforge.net
- http://secunia.com/advisories/25157 secunia.com
- http://www.securityfocus.com/bid/23857 www.securityfocus.com
- http://www.us.debian.org/security/2007/dsa-1287 www.us.debian.org