← Back

CVE-2005-4442

nvd nist
Published: Dec 21, 2005Modified: Apr 16, 2026

JSON object

Loading...
7.2
Vector
AV:L/AC:L/Au:N/C:C/I:C/A:C
Exploitability: 3.9 / Impact: 10.0
Source: NVD

Description

Untrusted search path vulnerability in OpenLDAP before 2.2.28-r3 on Gentoo Linux allows local users in the portage group to gain privileges via a malicious shared object in the Portage temporary build directory, which is part of the RUNPATH.

Affected (82)

Products: Openldap: Openldap
1 product
Openldap
Configuration A
82 vulnerable
Vulnerable SoftwareAffected Versions
Openldap
Up to 2.2.28_r2
Version 2.0.0
Version 2.0.10
Version 2.0.11
Version 2.0.12
Version 2.0.13
Version 2.0.14
Version 2.0.15
Version 2.0.16
Version 2.0.17
Version 2.0.18
Version 2.0.19
Version 2.0.1
Version 2.0.20
Version 2.0.21
Version 2.0.22
Version 2.0.23
Version 2.0.24
Version 2.0.25
Version 2.0.26
Version 2.0.27
Version 2.0.2
Version 2.0.3
Version 2.0.4
Version 2.0.5
Version 2.0.6
Version 2.0.7
Version 2.0.8
Version 2.0.9
Version 2.1.10
Version 2.1.11
Version 2.1.12
Version 2.1.13
Version 2.1.14
Version 2.1.15
Version 2.1.16
Version 2.1.17
Version 2.1.18
Version 2.1.19
Version 2.1.20
Version 2.1.21
Version 2.1.22
Version 2.1.23
Version 2.1.24
Version 2.1.25
Version 2.1.26
Version 2.1.27
Version 2.1.28
Version 2.1.29
Version 2.1.2
Version 2.1.30
Version 2.1.3
Version 2.1.4
Version 2.1.5
Version 2.1.6
Version 2.1.7
Version 2.1.8
Version 2.1.9
Version 2.2.10
Version 2.2.11
Version 2.2.12
Version 2.2.13
Version 2.2.14
Version 2.2.15
Version 2.2.16
Version 2.2.17
Version 2.2.18
Version 2.2.19
Version 2.2.20
Version 2.2.21
Version 2.2.22
Version 2.2.23
Version 2.2.24
Version 2.2.25
Version 2.2.26
Version 2.2.27
Version 2.2.4
Version 2.2.5
Version 2.2.6
Version 2.2.7
Version 2.2.8
Version 2.2.9

References (6)

Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Patch

Timeline

No history available yet.