CVE-2011-0532

The (1) backup and restore scripts, (2) main initialization script, and (3) ldap-agent script in 389 Directory Server 1.2.x (aka Red Hat…

Medium6.2EPSS 0.28%

Published: 23 Feb 2011
Updated: 6 Aug 2024
Reserved: 20 Jan 2011
Assigned by: redhat

Description

The (1) backup and restore scripts, (2) main initialization script, and (3) ldap-agent script in 389 Directory Server 1.2.x (aka Red Hat Directory Server 8.2.x) place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Timeline

2011
20 Jan 2011
20 Jan 2011
ID reserved
By redhat
23 Feb 201134 days later
23 Feb 2011· 34 days later
Published
2024
6 Aug 202413 years later
6 Aug 2024· 13 years later
Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2011-0532, by who scored it
Scored by	CVSS	Score	Vector
NVDNVD · Modified	2.0	Medium6.2	AV:L/AC:H/Au:N/C:C/I:C/A:C

EPSS (exploitation in 30 days): 0.28% · top 79% of all CVEs (8 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.2.

Weakness

Affected products

n/a
- affected n/a

References (5)

1025102 (opens in a new tab)vdb-entryx_refsource_SECTRACKx_transferred
https://bugzilla.redhat.com/show_bug.cgi?id=672468 (opens in a new tab)x_refsource_CONFIRMx_transferred
RHSA-2011:0293 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
rhds-ldlibrarypath-priv-esc(65637) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
46489 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2011-0532](https://cveledger.app/badge/CVE-2011-0532.svg)](https://cveledger.app/cve/CVE-2011-0532)

Record last updated 6 Aug 2024, 21:58 UTC.