CVE-2016-4984

Name of the Vulnerable Software and Affected Versions openldap-servers (affected versions not specified)

Description The issue concerns a script in openldap-servers that sets weak permissions for the TLS certificate, allowing local users to obtain the certificate by exploiting a race condition between its creation and the subsequent chmod operation to protect it.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.