CVE-2006-7191
CVE-2006-7191
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Untrusted search path vulnerability in lamdaemon.pl in LDAP Account Manager (LAM) before 1.0.0 allows local users to gain privileges via a modified PATH that points to a malicious rm program.
EPSS 0.3% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
ldap-account-manager Debian:12
- Affected ranges
- ECOSYSTEM: < 1.0.0-1
Update to 1.0.0-1
ldap-account-manager Debian:13
- Affected ranges
- ECOSYSTEM: < 1.0.0-1
Update to 1.0.0-1
ldap-account-manager Debian:14
- Affected ranges
- ECOSYSTEM: < 1.0.0-1
Update to 1.0.0-1
Original sources
- http://lam.cvs.sourceforge.net/lam/lam/lib/lamdaemon.pl?r1=1.32&r2=1.33
- http://www.us.debian.org/security/2007/dsa-1287
- http://lam.cvs.sourceforge.net/lam/lam/lib/lamdaemon.pl
- http://www.securityfocus.com/bid/23857
- http://secunia.com/advisories/25157
- http://lam.sourceforge.net/changelog/index.htm
- https://nvd.nist.gov/vuln/detail/CVE-2006-7191