[ GLSA 200512-07 ] OpenLDAP, Gauche: RUNPATH issues

[GLSA]

Gentoo Linux Security Advisory

Title: OpenLDAP, Gauche: RUNPATH issues (GLSA 200512-07)
Severity: low
Exploitable: local
Date: December 15, 2005
Updated: December 30, 2007
Bug(s): #105380, #112577
ID: 200512-07

Synopsis

OpenLDAP and Gauche suffer from RUNPATH issues that may allow users in the "portage" group to escalate privileges.

Background

OpenLDAP is a suite of LDAP-related application and development tools. Gauche is an R5RS Scheme interpreter.

Affected Packages

Package: net-nds/openldap
Vulnerable: < 2.2.28-r3
Unaffected: >= 2.2.28-r3
Unaffected: >= 2.1.30-r6 < 2.1.31
Architectures: All supported architectures

Package: dev-scheme/gauche
Vulnerable: < 0.8.6-r1
Unaffected: >= 0.8.6-r1
Architectures: All supported architectures


Description

Gentoo packaging for OpenLDAP and Gauche may introduce insecure paths into the list of directories that are searched for libraries at runtime.

Impact

A local attacker, who is a member of the "portage" group, could create a malicious shared object in the Portage temporary build directory that would be loaded at runtime by a dependent binary, potentially resulting in privilege escalation.

Workaround

Only grant "portage" group rights to trusted users.

Resolution

All OpenLDAP users should upgrade to the latest version: