Unscored severity · published Oct 20, 2000
CVE-2000-0748
OpenLDAP 1.2.11 and earlier improperly installs the ud binary with group write permissions, which could allow any user in that group to replace the binary with a Trojan horse
–
CVSS
0.4%
EPSS
No
On KEV
Description
OpenLDAP 1.2.11 and earlier improperly installs the ud binary with group write permissions, which could allow any user in that group to replace the binary with a Trojan horse.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 29% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OP
Openldap · Openldap
1.2.7; 1.2.8; 1.2.9; 1.2.10; 1.2.11 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2000-0748
CVE.org
https://www.cve.org/CVERecord?id=CVE-2000-0748
Patch
http://archives.neohapsis.com/archives/bugtraq/2000-07/0375.html
Patch
http://www.securityfocus.com/bid/1511
More from Openldap
9.8
CVE-2022-29155
In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query
9.8
CVE-2010-0211
The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which allows remote attackers to cause a…
7.5
CVE-2023-2953
A vulnerability was found in openldap
7.5
CVE-2020-25710
A flaw was found in OpenLDAP in versions before 2.4.56
7.5
CVE-2020-25709
A flaw was found in OpenLDAP