A Insecure Temporary File vulnerability in openldap2 of SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15; openSUSE Leap 15.1, openSUSE Leap 15.2 allows local attackers to overwrite arbitrary files and gain access to the openldap2 configuration This issue affects: SUSE Linux Enterprise Server 15-LTSS openldap2 versions prior to 2.4.46-9.37.1. SUSE Linux Enterprise Server for SAP 15 openldap2 versions prior to 2.4.46-9.37.1. openSUSE Leap 15.1 openldap2 versions prior to 2.4.46-lp151.10.18.1. openSUSE Leap 15.2 openldap2 versions prior to 2.4.46-lp152.14.9.1.

This update for openldap2 fixes the following issues :

CVE-2020-8027: openldap_update_modules_path.sh starts daemons unconditionally and uses fixed paths in /tmp (bsc#1175568).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for openldap2 fixes the following issues :

  - CVE-2020-8027: openldap_update_modules_path.sh starts     daemons unconditionally and uses fixed paths in /tmp     (bsc#1175568).

This update was imported from the SUSE:SLE-15:Update update project.

ID	Name	Product	Family	Severity
143868	SUSE SLED15 / SLES15 Security Update : openldap2 (SUSE-SU-2020:2712-1)	Nessus	SuSE Local Security Checks	medium
143628	SUSE SLES15 Security Update : openldap2 (SUSE-SU-2020:2712-2)	Nessus	SuSE Local Security Checks	medium
141153	openSUSE Security Update : openldap2 (openSUSE-2020-1534)	Nessus	SuSE Local Security Checks	medium
141075	openSUSE Security Update : openldap2 (openSUSE-2020-1539)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2020-8027

medium

Tenable Plugins

medium

medium

medium

medium