CVE-2005-4442: High severity red hat openldap servers vulnerability
Untrusted search path vulnerability in OpenLDAP before 2.2.28-r3 on Gentoo Linux allows local users in the portage group to gain privileges via a malicious shared object in the Portage temporary build directory, which is part of the RUNPATH.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-4442?
CVE-2005-4442 has a medium severity rating as it allows local users to gain elevated privileges.
How do I fix CVE-2005-4442?
To fix CVE-2005-4442, update OpenLDAP to version 2.2.28 or later.
Which versions of OpenLDAP are affected by CVE-2005-4442?
CVE-2005-4442 affects OpenLDAP versions before 2.2.28, including various 2.0.x, 2.1.x, and 2.2.x versions.
Who is affected by CVE-2005-4442?
Local users in the Portage group on Gentoo Linux systems running vulnerable OpenLDAP versions are affected by CVE-2005-4442.
What is the impact of exploiting CVE-2005-4442?
Exploitation of CVE-2005-4442 allows an attacker to load and execute arbitrary code with the privileges of the user running the OpenLDAP service.