CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 6.2
CWE Name:  Permissions Privileges and Access Controls
Summary: the (1) backup and restore scripts, (2) main initialization script, and (3) ldap-agent script in 389 directory server 1.2.x (aka red hat directory server 8.2.x) place a zero-length directory name in the ld_library_path, which allows local users to gain privileges via a trojan horse shared library in the current working directory.
Access Authentication: NONE
Access Complexity: HIGH
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2011-02-23
Last Modified Date: 2017-08-17