Back to search
CVE-2009-1073
Published: Mar 31, 2009
Modified: Aug 7, 2024
PUBLISHED
Description
nss-ldapd before 0.6.8 uses world-readable permissions for the /etc/nss-ldapd.conf file, which allows local users to obtain a cleartext password for the LDAP server by reading the bindpw field.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
[oss-security] 20090324 Re: CVE request -- ucd-snmp / net-snmp, libnss-ldapd / nss_ldap
mailing-list
x_refsource_MLIST
[oss-security] 20090323 CVE request -- ucd-snmp / net-snmp, libnss-ldapd / nss_ldap
mailing-list
x_refsource_MLIST
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=520476
x_refsource_CONFIRM
34211
vdb-entry
x_refsource_BID
[oss-security] 20090324 Re: CVE request -- ucd-snmp / net-snmp, libnss-ldapd / nss_ldap
mailing-list
x_refsource_MLIST
[oss-security] 20090324 Re: CVE request -- ucd-snmp / net-snmp, libnss-ldapd / nss_ldap
mailing-list
x_refsource_MLIST
34523
third-party-advisory
x_refsource_SECUNIA
http://ch.tudelft.nl/~arthur/nss-ldapd/news.html#20090322
x_refsource_CONFIRM
http://launchpad.net/bugs/cve/2009-1073
x_refsource_MISC
DSA-1758
vendor-advisory
x_refsource_DEBIAN
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now