CVE-2016-4984

CVE-2016-4984 affects openldap-servers; the issue is a race condition in /usr/libexec/openldap/generate-server-cert.sh that leads to weak permissions on the TLS certificate. This allows a local authenticated user to obtain the TLS certificate by exploiting the creation/chmod race. The IBM X-Force...