CVE-2000-0748: Openldap

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

OpenLDAP 1.2.11 and earlier improperly installs the ud binary with group write permissions, which could allow any user in that group to replace the binary with a Trojan horse.

Affected products

• Openldap Openldap: version 1.2.7 only; version 1.2.8 only; version 1.2.9 only; version 1.2.10 only; version 1.2.11 only

Published 2000-10-20. Last modified 2026-06-16.