CVE-2000-0336

Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack.

CVSS v2.0 2.1 LOW

2.1^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:L/Au:N/C:N/I:P/A:N

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-2000-009.0.txt	Patch Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2000-012.html
http://www.securityfocus.com/bid/1232
http://www.turbolinux.com/pipermail/tl-security-announce/2000-May/000009.html

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:openldap:openldap:1.2.7:::::::*
	cpe:2.3:a:openldap:openldap:1.2.8:::::::*
	cpe:2.3:a:openldap:openldap:1.2.9:::::::*
	cpe:2.3:a:openldap:openldap:1.2.10:::::::*

Configuration 2 (hide)

OR	cpe:2.3:o:mandrakesoft:mandrake_linux:6.1:::::::*
	cpe:2.3:o:mandrakesoft:mandrake_linux:7.0:::::::*
	cpe:2.3:o:redhat:linux:6.1::alpha:::::
	cpe:2.3:o:redhat:linux:6.1::i386:::::
	cpe:2.3:o:redhat:linux:6.1::sparc:::::
	cpe:2.3:o:redhat:linux:6.2::alpha:::::
	cpe:2.3:o:redhat:linux:6.2::i386:::::
	cpe:2.3:o:redhat:linux:6.2::sparc:::::
	cpe:2.3:o:turbolinux:turbolinux:4.2:::::::*
	cpe:2.3:o:turbolinux:turbolinux:4.4:::::::*
	cpe:2.3:o:turbolinux:turbolinux:6.0.2:::::::*

History

No history.

Information

Published : 2000-04-21 04:00

Updated : 2008-09-10 19:04

NVD link : CVE-2000-0336

Mitre link : CVE-2000-0336

CVE.ORG link : CVE-2000-0336

JSON object : View

Products Affected

redhat

linux

openldap

openldap

turbolinux

turbolinux

mandrakesoft

mandrake_linux

CWE

NVD-CWE-Other

{"id": "CVE-2000-0336", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2000-04-21T04:00:00.000", "references": [{"url": "ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-2000-009.0.txt", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.redhat.com/support/errata/RHSA-2000-012.html", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/1232", "source": "cve@mitre.org"}, {"url": "http://www.turbolinux.com/pipermail/tl-security-announce/2000-May/000009.html", "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack."}], "lastModified": "2008-09-10T19:04:10.133", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:openldap:openldap:1.2.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AC07AD0D-5DF9-41A4-8592-CEFF1842355D"}, {"criteria": "cpe:2.3:a:openldap:openldap:1.2.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "30017C56-42A9-4AF9-B5B3-7357E424F837"}, {"criteria": "cpe:2.3:a:openldap:openldap:1.2.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C8A51F38-3F5A-4F6D-93EE-776B5C2FF48F"}, {"criteria": "cpe:2.3:a:openldap:openldap:1.2.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8DBEC27E-3220-42CE-B6CC-675F387CB506"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:mandrakesoft:mandrake_linux:6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ACAAD334-2CA7-4B3B-BA25-302E7610BC2A"}, {"criteria": "cpe:2.3:o:mandrakesoft:mandrake_linux:7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E4853E92-5E0A-47B9-A343-D5BEE87D2C27"}, {"criteria": "cpe:2.3:o:redhat:linux:6.1:*:alpha:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C89454B9-4F45-4A42-A06D-ED42D893C544"}, {"criteria": "cpe:2.3:o:redhat:linux:6.1:*:i386:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B72D6205-DFA4-41D9-B3B6-0B7DA756CD8F"}, {"criteria": "cpe:2.3:o:redhat:linux:6.1:*:sparc:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1E64093E-7D53-4238-95C3-48ED5A0FFD97"}, {"criteria": "cpe:2.3:o:redhat:linux:6.2:*:alpha:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "344610A8-DB6D-4407-9304-916C419F648C"}, {"criteria": "cpe:2.3:o:redhat:linux:6.2:*:i386:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B7EC2B95-4715-4EC9-A10A-2542501F8A61"}, {"criteria": "cpe:2.3:o:redhat:linux:6.2:*:sparc:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "64775BEF-2E53-43CA-8639-A7E54F6F4222"}, {"criteria": "cpe:2.3:o:turbolinux:turbolinux:4.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5D15A193-3E01-467C-AEAD-497F4600DB06"}, {"criteria": "cpe:2.3:o:turbolinux:turbolinux:4.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F7C765FF-0A3D-4BF4-B236-609658776ACA"}, {"criteria": "cpe:2.3:o:turbolinux:turbolinux:6.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C6619B49-8A89-4600-A47F-A39C8BF54259"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}