Lucene search
MitreCVELIST:CVE-2007-0476HistoryJan 25, 2007 - 12:00 a.m.
CVE-2007-0476
2007-01-2500:00:00
mitre
www.cve.org
5
The gencert.sh script, when installing OpenLDAP before 2.1.30-r10, 2.2.x before 2.2.28-r7, and 2.3.x before 2.3.30-r2 as an ebuild in Gentoo Linux, does not create temporary directories in /tmp securely during emerge, which allows local users to overwrite arbitrary files via a symlink attack.
Related
openvas
openvas
Gentoo Security Advisory GLSA 200701-19 (openldap)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200701-19 (openldap)
2008-09-24 00:00:00
securityvulns
securityvulns
OpenLDAP installation symbolic links vulnerability
2007-01-24 00:00:00
prion
prion
Design/Logic Flaw
2007-01-25 00:28:00
nvd
nvd
CVE-2007-0476
2007-01-25 00:28:00
gentoo
gentoo
OpenLDAP: Insecure usage of /tmp during installation
2007-01-23 00:00:00
nessus
nessus
GLSA-200701-19 : OpenLDAP: Insecure usage of /tmp during installation
2007-01-26 00:00:00
cve
cve
CVE-2007-0476
2007-01-25 00:28:00