CVE-2007-5794 Race condition in nss_ldap, when used in applications that are linked against the pthread library and fork after a call to nss_ldap, might send user data to the wrong process because of improper handl...
MediumCVSS 4.3
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Race condition in nss_ldap, when used in applications that are linked against the pthread library and fork after a call to nss_ldap, might send user data to the wrong process because of improper handling of the LDAP connection. NOTE: this issue was originally reported for Dovecot with the wrong mailboxes being returned, but other applications might also be affected.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nss ldap | All versions | No fix listed |
| debian/libnss-ldap(Debian:11) | < 256-1 | 256-1 |
References
- bugs.debian.org
- bugs.gentoo.org
- SUSE-SR:2008:003 vendor-advisory
- 27670 third-party-advisory vendor-advisory
- 27768 third-party-advisory vendor-advisory
- 27839 third-party-advisory vendor-advisory
- 28061 third-party-advisory vendor-advisory
- 28838 third-party-advisory vendor-advisory
- 29083 third-party-advisory vendor-advisory
- 30352 third-party-advisory vendor-advisory
- 31227 third-party-advisory vendor-advisory
- 31524 third-party-advisory vendor-advisory
- GLSA-200711-33 vendor-advisory
- support.avaya.com
- wiki.rpath.com
- DSA-1430 vendor-advisory
- [Dovecot] 20050409 Authentication and the wrong mailbox? mailing-list
- [Dovecot] 20050303 hanging imap... and users getting other users' emails! mailing-list
- MDVSA-2008:049 vendor-advisory
- RHSA-2008:0389 vendor-advisory
- RHSA-2008:0715 vendor-advisory
- 20080212 FLEA-2008-0003-1 nss_ldap mailing-list
- 26452 patch vdb-entry
- 1020088 vdb-entry
- bugzilla.redhat.com
- bugzilla.redhat.com
- nssldap-ldap-race-condition(38505) vdb-entry
- issues.rpath.com
- oval:org.mitre.oval:def:10625 signature vdb-entry
- security-tracker.debian.org vendor-advisory