CVE-2001-0300

Currently unrated

Key Information:

Vendor
Oracle
Status
Internet Directory
Vendor
CVE Published:
2 June 2001

Summary

oidldapd 2.1.1.1 in Oracle 8.1.7 records log files in a directory (ldaplog) that has world-writable permissions, which may allow local users to delete logs and/or overwrite other files via a symlink attack.

References

http://archives.neohapsis.com/archives/bugtraq/2000-12/04...
mailing-listx_refsource_BUGTRAQ
https://exchange.xforce.ibmcloud.com/vulnerabilities/5804
vdb-entryx_refsource_XF
http://www.kb.cert.org/vuls/id/610904
third-party-advisoryx_refsource_CERT-VN

EPSS Score

5% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.