NVD

Id
57845  
Name
CVE-2007-5794  
Description
Race condition in nss_ldap, when used in applications that are linked against the pthread library and fork after a call to nss_ldap, might send user data to the wrong process because of improper handling of the LDAP connection. NOTE: this issue was originally reported for Dovecot with the wrong mailboxes being returned, but other applications might also be affected.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2007-11-13  
Modified Date
2011-08-10  
Seq
2007-5794  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
296044 57845 CVE-2007-5794 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=453868  View
296045 57845 CVE-2007-5794 http://bugs.gentoo.org/show_bug.cgi?id=198390  View
296046 57845 CVE-2007-5794 SUSE-SR:2008:003  View
296047 57845 CVE-2007-5794 oval:org.mitre.oval:def:10625  View
296048 57845 CVE-2007-5794 GLSA-200711-33  View
296049 57845 CVE-2007-5794 http://support.avaya.com/elmodocs2/security/ASA-2008-332.htm  View
296050 57845 CVE-2007-5794 http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0255  View
296051 57845 CVE-2007-5794 DSA-1430  View
296052 57845 CVE-2007-5794 [Dovecot] 20050409 Authentication and the wrong mailbox?  View
296053 57845 CVE-2007-5794 [Dovecot] 20050303 hanging imap... and users getting other users" emails!  View
296054 57845 CVE-2007-5794 MDVSA-2008:049  View
296055 57845 CVE-2007-5794 RHSA-2008:0389  View
296056 57845 CVE-2007-5794 RHSA-2008:0715  View
296057 57845 CVE-2007-5794 20080212 FLEA-2008-0003-1 nss_ldap  View
296058 57845 CVE-2007-5794 26452  View
296059 57845 CVE-2007-5794 1020088  View
296060 57845 CVE-2007-5794 nssldap-ldap-race-condition(38505)  View
296061 57845 CVE-2007-5794 https://bugzilla.redhat.com/show_bug.cgi?id=154314  View
296062 57845 CVE-2007-5794 https://bugzilla.redhat.com/show_bug.cgi?id=367461  View
296063 57845 CVE-2007-5794 https://issues.rpath.com/browse/RPL-1913  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52484 JVNDB-2007-001176 nss_ldap の LDAP 接続に関する競合状態の脆弱性 nss_ldap には pthread ライブラリに対してリンクをし、nss_ldap を呼び出した後に fork した場合、LDAP 接続の取り扱いに不備があり、不正なプロセスにユーザデータを送信する、競合状態となる脆弱性が存在します。 CVE-2007-5794 29149 CVE-2007-5794 57845 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001176.html 2007-11-13 2008-11-26 View