CVE-2016-4984

/usr/libexec/openldap/generate-server-cert.sh in openldap-servers sets weak permissions for the TLS certificate, which allows local users to obtain the TLS…

published July 14, 2017

CVSS
—
EPSS
0%
Percentile
3.8
In the wild
Unconfirmed
What it is

/usr/libexec/openldap/generate-server-cert.sh in openldap-servers sets weak permissions for the TLS certificate, which allows local users to obtain the TLS certificate by leveraging a race condition between the creation of the certificate, and the chmod to protect it.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00150 · 3.8th percentile
Published
2017-07-14T20:00Z
EPSS history
Timeline
  • 14 JUL 20:00Z
    /usr/libexec/openldap/generate-server-cert.sh in openldap-servers sets weak permissions for the TLS certificate, which allows local users to obtain the TLS…
    cvelistv5