|
|
OpenLDAP /usr/tmp/ Symlink Vulnerability
Solution: Patches are available from RedHat and TurboLinux to remedy this problem. Rebuilding OpenLDAP, and configuring the following values to something other than /usr/tmp will fix this problem: servers/slapd/back-ldbm/back-ldbm.g, "DEFAULT_DB_DIRECTORY" variable servers/slapd/slapd.conf, "directory" variable servers/slurpd/slurp.h, "DEFAULT_SLURPD_REPLICA_DIR" variable The latest version, 1.2.10, still appears vulnerable to this problem. Redhat openldap-1.2.7-2.i386.rpm
Redhat openldap-1.2.9-5.i386.rpm
Turbolinux Turbolinux 6.0.2
Mandriva Linux Mandrake 6.1
Redhat Linux 6.1 i386
Redhat Linux 6.1 sparc
Redhat Linux 6.1 alpha
Redhat Linux 6.2 sparc
Redhat Linux 6.2 alpha
Redhat Linux 6.2 i386
Mandriva Linux Mandrake 7.0
|
|
Privacy Statement |