Red Hat 'redhat-idm-console' Insecure Startup Script Local Privilege Escalation Vulnerability

Bugtraq ID:	28327
Class:	Access Validation Error
CVE:	CVE-2008-0889
Remote:	No
Local:	Yes
Published:	Mar 19 2008 12:00AM
Updated:	Mar 20 2008 01:20AM
Credit:	Doncho N. Gunchev
Vulnerable:	Redhat redhat-idm-console 1.0 Redhat Directory Server 8 EL 5 Redhat Directory Server 8 EL 4
Not Vulnerable:

Red Hat 'redhat-idm-console' Insecure Startup Script Local Privilege Escalation Vulnerability

The 'redhat-idm-console' application is prone to a local privilege-escalation vulnerability because of insecure permissions on its startup script.

Attackers can exploit this issue to modify the startup script and execute arbitrary code with the privileges of the user running the Red Hat Management Console.

This issue affects 'redhat-idm-console' 1.0.0 used with Red Hat Directory Server 8.

Red Hat 'redhat-idm-console' Insecure Startup Script Local Privilege Escalation Vulnerability

Attackers can use readily available tools to launch attacks.

Red Hat 'redhat-idm-console' Insecure Startup Script Local Privilege Escalation Vulnerability

Solution:
The vendor has released updates to address this issue. Please see the references for more information.

Red Hat 'redhat-idm-console' Insecure Startup Script Local Privilege Escalation Vulnerability

References:

• Red Hat Directory Server Homepage (Red Hat)
  
• RHSA-2008:0191-3 redhat-idm-console security update (Red Hat)