CVE-2007-0476: Gentoo Linux

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

The gencert.sh script, when installing OpenLDAP before 2.1.30-r10, 2.2.x before 2.2.28-r7, and 2.3.x before 2.3.30-r2 as an ebuild in Gentoo Linux, does not create temporary directories in /tmp securely during emerge, which allows local users to overwrite arbitrary files via a symlink attack.

Affected products

• Gentoo Linux: version 2.1.30 only; version 2.2.28 only; version 2.3.30 only

Published 2007-01-25. Last modified 2026-06-16.