Solution
Please Install the Updated Packages.
Insight
A vulnerability has been found and corrected in phpldapadmin:
Directory traversal vulnerability in cmd.php in phpLDAPadmin 1.1.0.5 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the cmd parameter (CVE-2009-4427).
The updated packages have been patched to correct thies issue.
Affected
phpldapadmin on Mandriva Enterprise Server 5,
Mandriva Enterprise Server 5/X86_64
Severity
Classification
-
CVE CVE-2009-4427 -
CVSS Base Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related Vulnerabilities