VDB
CVE-2007-5794
CVE-2007-5794
PUBLISHED
CVSS 4.300000190734863 MEDIUM
Race condition in nss_ldap, when used in applications that are linked against the pthread library and fork after a call to nss_ldap, might send user data to the wrong process because of improper handling of the LDAP connection. NOTE: this issue was originally reported for Dovecot with the wrong mailboxes being returned, but other applications might also be affected.
EPSS 1.59% · 82.0th percentile
Risk Scores
CVSS 2.0
4.300000190734863
EPSS Score
1.59%
82.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| nss_ldap | nss_ldap |
Timeline
- Nov 13, 2007 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 20, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
- May 25, 2023 EPSS Score
- Jul 17, 2023 EPSS Score
References
- 28061 third-party-advisory
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=453868 url
- 27670 third-party-advisory
- [Dovecot] 20050303 hanging imap... and users getting other users' emails! mailing-list
- https://bugzilla.redhat.com/show_bug.cgi?id=154314 url
- http://bugs.gentoo.org/show_bug.cgi?id=198390 url
- 29083 third-party-advisory
- GLSA-200711-33 vendor-advisory
- [Dovecot] 20050409 Authentication and the wrong mailbox? mailing-list
- 20080212 FLEA-2008-0003-1 nss_ldap mailing-list
- oval:org.mitre.oval:def:10625 vdb
- https://issues.rpath.com/browse/RPL-1913 url
- 27768 third-party-advisory
- 26452 vdb
- https://bugzilla.redhat.com/show_bug.cgi?id=367461 url
- 27839 third-party-advisory
- RHSA-2008:0389 vendor-advisory
- MDVSA-2008:049 vendor-advisory
- 30352 third-party-advisory
- 31227 third-party-advisory
…and 10 more