Bugzilla will be upgraded to version 5.0 on a still to be determined date in the near future. The original upgrade date has been delayed.
First Last Prev Next    This bug is not in your last search results.
Bug 1488751 - (CVE-2017-14159) CVE-2017-14159 openldap: Privilege escalation via PID file manipulation
CVE-2017-14159 openldap: Privilege escalation via PID file manipulation
Status: NEW
Product: Security Response
Classification: Other
Component: vulnerability (Show other bugs)
unspecified
All Linux
low Severity low
: ---
: ---
Assigned To: Red Hat Product Security
impact=low,public=20170728,reported=2...
: Security
Depends On: 1488752
Blocks:
  Show dependency tree / graph
 
Reported: 2017-09-06 03:47 EDT by Andrej Nemec
Modified: 2018-10-19 17:43 EDT (History)
26 users (show)

See Also:
Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed:
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

  None (edit)
Description Andrej Nemec 2017-09-06 03:47:16 EDT 
slapd in OpenLDAP 2.4.45 and earlier creates a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a "kill `cat /pathname`" command, as demonstrated by openldap-initscript.

This represents a minor security issue; additional factors are needed to make it exploitable.

References:

http://www.openldap.org/its/index.cgi?findid=8703
Comment 1 Andrej Nemec 2017-09-06 03:47:45 EDT 
Created openldap tracking bugs for this issue:

Affects: fedora-all [bug 1488752]
Note You need to log in before you can comment on or make changes to this bug.
First Last Prev Next    This bug is not in your last search results.