Exploitation Summary
EIP tracks 1 public exploit for CVE-2000-0336. PoCs published by anonymous.
AI-analyzed exploit summary This exploit leverages a symbolic link vulnerability in OpenLDAP to overwrite arbitrary files by creating a symlink in /usr/tmp. The vulnerability arises due to OpenLDAP not checking for file existence before opening files in a world-writable directory.
Description
Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by anonymous · textlocallinux
https://www.exploit-db.com/exploits/19946
This exploit leverages a symbolic link vulnerability in OpenLDAP to overwrite arbitrary files by creating a symlink in /usr/tmp. The vulnerability arises due to OpenLDAP not checking for file existence before opening files in a world-writable directory.
Classification
Working Poc 100%
Attack Type
Other
Complexity
Trivial
Reliability
Reliable
Target:
OpenLDAP (as shipped with RedHat 6.1, 6.2, TurboLinux 6.0.2 and earlier)
No auth needed
Prerequisites:
OpenLDAP configured with 'directory' set to /usr/tmp · /usr/tmp is a world-writable directory · slurpd built with DEFAULT_SLURPD_REPLICA_DIR set to /usr/tmp
MITRE ATT&CK
mistral-large-3 · analyzed Feb 16, 2026
Full analysis →
References (4)
Core 4
Core References
Vendor Advisory vendor-advisory
x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2000-012.html
Various Sources vendor-advisory
x_refsource_turbo
http://www.turbolinux.com/pipermail/tl-security-announce/2000-May/000009.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/1232
Patch, Vendor Advisory vendor-advisory
x_refsource_caldera
ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-2000-009.0.txt
Scores
EPSS
0.0090
EPSS Percentile
56.3%
Details
Status
published
Products (11)
mandrakesoft/mandrake_linux
6.1
mandrakesoft/mandrake_linux
7.0
openldap/openldap
1.2.7
openldap/openldap
1.2.8
openldap/openldap
1.2.9
openldap/openldap
1.2.10
redhat/linux
6.1 (3 CPE variants)
redhat/linux
6.2 (3 CPE variants)
turbolinux/turbolinux
4.2
turbolinux/turbolinux
4.4
... and 1 more
Published
Apr 21, 2000
Tracked Since
Feb 18, 2026