NVD

Id
57439  
Name
CVE-2007-5373  
Description
ldapscripts 1.4 and 1.7 sends a password as a command line argument when calling some LDAP programs, which might allow local users to read the password by listing the process and its arguments, as demonstrated by a call to ldappasswd in the _changepassword function.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2007-10-11  
Modified Date
2008-09-05  
Seq
2007-5373  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
293732 57439 CVE-2007-5373 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=445582  View
293733 57439 CVE-2007-5373 DSA-1517  View
293734 57439 CVE-2007-5373 25982  View
293735 57439 CVE-2007-5373 ldapscripts-commandline-info-disclosure(37029)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
55807 JVNDB-2007-004499 ldapscripts におけるパスワードを読まれる脆弱性 ldapscripts は、一部の LDAP プログラムが呼び出される際、コマンドラインの引数としてパスワードを送信するため、パスワードを読まれる脆弱性が存在します。 CVE-2007-5373 28728 CVE-2007-5373 57439 2.1 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004499.html 2007-10-11 2012-09-25 View