Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Gentoo: GLSA-200711-33 Low Severity: nss_ldap Information Disclosure

gentoo
Calendar Grey November 25, 2007
Scroller Gentoo
Concurrent access issues in nss_ldap could result in sensitive information exposure; affected Gentoo users should consider patching immediately.
A race condition might lead to theft of user credentials or information disclosure in services using nss_ldap.

Summary

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Gentoo Linux Security Advisory                           GLSA 200711-33
                                            https://security.gentoo.org/

  Severity: Low
     Title: nss_ldap: Information disclosure
      Date: November 25, 2007
      Bugs: #198390
        ID: 200711-33


Synopsis
=======
A race condition might lead to theft of user credentials or information
disclosure in services using nss_ldap.

Background
=========
nss_ldap is a Name Service Switch module which allows 'passwd', 'group'
and 'host' database information to be pulled from LDAP.

Affected packages
================
    -------------------------------------------------------------------
     Package            /  Vulnerable  /                    Unaffected
    -------------------------------------------------------------------
  1  sys-auth/nss_ldap        < 258                             >= 258

==========
Josh Burley reported that nss_ldap does not properly handle the ...
Read the Full Advisory
Topics%20covered

Topics Covered

security advisory gentoo race condition low severity information disclosure nss_ldap credentials

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Severity
low
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory gentoo race condition low severity information disclosure nss_ldap credentials

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround