CVE-2005-4442

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-12-21 · updated 2026-06-16

Description

Untrusted search path vulnerability in OpenLDAP before 2.2.28-r3 on Gentoo Linux allows local users in the portage group to gain privileges via a malicious shared object in the Portage temporary build directory, which is part of the RUNPATH.

Affected products

openldap: through 2.2.28_r2; 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5 (+75)

References

http://secunia.com/advisories/18040/
http://www.gentoo.org/security/en/glsa/glsa-200512-07.xml
http://www.securityfocus.com/bid/15120
http://secunia.com/advisories/18040/
http://www.gentoo.org/security/en/glsa/glsa-200512-07.xml
http://www.securityfocus.com/bid/15120

Get alerted when CVE-2005-4442 or the next vulnerability affects your stack