CVE-2000-0336

Published: Apr 21, 2000Modified: Apr 16, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack.

Affected (15)

Products: Openldap: Openldap · Mandrakesoft: Mandrake Linux · Redhat: Linux · +1 more

Show all products

Openldap: Openldap · Mandrakesoft: Mandrake Linux · Redhat: Linux · Turbolinux: Turbolinux

1 product

1 product

1 product

1 product

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Openldap Openldap	Version 1.2.10
Openldap Openldap	Version 1.2.7
Openldap Openldap	Version 1.2.8
Openldap Openldap	Version 1.2.9

Configuration B

11 vulnerable

Vulnerable Software	Affected Versions
Mandrakesoft Mandrake Linux	Version 6.1
Mandrakesoft Mandrake Linux	Version 7.0
Redhat Linux	Version 6.1
Redhat Linux	Version 6.1
Redhat Linux	Version 6.1
Redhat Linux	Version 6.2
Redhat Linux	Version 6.2
Redhat Linux	Version 6.2
Turbolinux Turbolinux	Version 4.2
Turbolinux Turbolinux	Version 4.4
Turbolinux Turbolinux	Version 6.0.2

References (8)

ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-2000-009.0.txt (unsafe URL)

Source: cve@mitre.org

PatchVendor Advisory

http://www.redhat.com/support/errata/RHSA-2000-012.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/1232

Source: cve@mitre.org

http://www.turbolinux.com/pipermail/tl-security-announce/2000-May/000009.html

Source: cve@mitre.org

ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-2000-009.0.txt (unsafe URL)

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.redhat.com/support/errata/RHSA-2000-012.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/1232

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.turbolinux.com/pipermail/tl-security-announce/2000-May/000009.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.