Description OpenLinux 2.3 Desktop was shipped with a misconfigured OpenLDAP package. While doing this, it does not properly check for symbolic links.
Any local user can therefore trick slapd into overwriting arbitrary files on the system.
The recommended approach is to upgrade the RPM 4. Not vulnerable 6. OpenLinux eDesktop 2.4 Not vulnerable 7. Our advisories are a service to our customers intended to promote secure installation and use of Caldera OpenLinux.