Privilege Escalation in Red Hat Directory Server 8.2.x

CVE-2011-0532

Summary

The 389 Directory Server, also known as Red Hat Directory Server, is affected by a vulnerability that arises from backup and restore scripts, the main initialization script, and the ldap-agent script misconfiguring the LD_LIBRARY_PATH. This misconfiguration allows local users to place a zero-length directory name, which can then be exploited through a Trojan horse shared library located in the current working directory, leading to potential privilege escalation.

References