OpenLDAP, Gauche: RUNPATH issues — GLSA 200512-07

OpenLDAP and Gauche suffer from RUNPATH issues that may allow users in the "portage" group to escalate privileges.

Affected packages

net-nds/openldap on all architectures
Affected versions < 2.2.28-r3
Unaffected versions >= 2.2.28-r3
revision >= 2.1.30-r6
dev-scheme/gauche on all architectures
Affected versions < 0.8.6-r1
Unaffected versions >= 0.8.6-r1

Background

OpenLDAP is a suite of LDAP-related application and development tools. Gauche is an R5RS Scheme interpreter.

Description

Gentoo packaging for OpenLDAP and Gauche may introduce insecure paths into the list of directories that are searched for libraries at runtime.

Impact

A local attacker, who is a member of the "portage" group, could create a malicious shared object in the Portage temporary build directory that would be loaded at runtime by a dependent binary, potentially resulting in privilege escalation.

Workaround

Only grant "portage" group rights to trusted users.

Resolution

All OpenLDAP users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose net-nds/openldap

All Gauche users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=dev-scheme/gauche-0.8.6-r1"

References

Release date
December 15, 2005

Latest revision
December 30, 2007: 03

Severity
low

Exploitable
local

Bugzilla entries