NVD

Id
7592  
Name
CVE-2011-0532  
Description
The (1) backup and restore scripts, (2) main initialization script, and (3) ldap-agent script in 389 Directory Server 1.2.x (aka Red Hat Directory Server 8.2.x) place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.  
Reject
 
CVSS Version
2  
CVSS Score
6.2  
Severity
Medium  
CVSS Base Score
6.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-02-23  
Modified Date
2011-03-30  
Seq
2011-0532  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
42826 7592 CVE-2011-0532 RHSA-2011:0293  View
42827 7592 CVE-2011-0532 46489  View
42828 7592 CVE-2011-0532 1025102  View
42829 7592 CVE-2011-0532 rhds-ldlibrarypath-priv-esc(65637)  View
42830 7592 CVE-2011-0532 https://bugzilla.redhat.com/show_bug.cgi?id=672468  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
33927 JVNDB-2011-004169 389 Directory Server のバックアップおよび復旧スクリプトにおける権限を取得される脆弱性 389 Directory Server のバックアップおよび復旧スクリプト、メイン初期化のスクリプトおよび ldap-agent スクリプトは、LD_LIBRARY_PATH のゼロ長のディレクトリ名を配置するため、権限を取得される脆弱性が存在します。 CVE-2011-0532 48439 CVE-2011-0532 7592 6.2 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004169.html 2011-02-23 2012-03-27 View