Vulnerability Description
OpenLDAP 1.2.11 and earlier improperly installs the ud binary with group write permissions, which could allow any user in that group to replace the binary with a Trojan horse.
CVSS Score
4.6
MEDIUM
AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Openldap | Openldap | 1.2.7 |
References
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0375.htmlPatchVendor Advisory
- http://www.securityfocus.com/bid/1511PatchVendor Advisory
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0375.htmlPatchVendor Advisory
- http://www.securityfocus.com/bid/1511PatchVendor Advisory
FAQ
What is CVE-2000-0748?
CVE-2000-0748 is a vulnerability with a CVSS score of 4.6 (MEDIUM). OpenLDAP 1.2.11 and earlier improperly installs the ud binary with group write permissions, which could allow any user in that group to replace the binary with a Trojan horse.
How severe is CVE-2000-0748?
CVE-2000-0748 has been rated MEDIUM with a CVSS base score of 4.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2000-0748?
Check the references section above for vendor advisories and patch information. Affected products include: Openldap Openldap.