CVE-2011-0532
389 Directory Server 1.2.x - Privilege Escalation via LD_LIBRARY_PATH Manipulation
Title source: llmDescription
The (1) backup and restore scripts, (2) main initialization script, and (3) ldap-agent script in 389 Directory Server 1.2.x (aka Red Hat Directory Server 8.2.x) place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
References (5)
Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id?1025102
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=672468
Vendor Advisory vendor-advisory
x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2011-0293.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/65637
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/46489
Scores
EPSS
0.0028
EPSS Percentile
20.6%
Details
CWE
CWE-264
Status
published
Products (11)
fedoraproject/389_directory_server
1.2.1
fedoraproject/389_directory_server
1.2.2
fedoraproject/389_directory_server
1.2.3
fedoraproject/389_directory_server
1.2.5 (5 CPE variants)
fedoraproject/389_directory_server
1.2.6 (9 CPE variants)
fedoraproject/389_directory_server
1.2.6.1
fedoraproject/389_directory_server
1.2.7 alpha3
fedoraproject/389_directory_server
1.2.7.5
fedoraproject/389_directory_server
1.2.8 alpha1 (2 CPE variants)
redhat/directory_server
8.2
... and 1 more
Published
Feb 23, 2011
Tracked Since
Feb 18, 2026