CVE-2007-5794 (nss_ldap) [Sitemap] - HeapOverflow Computer Security Community & Forums : Heap Overflow.com

PDA

View Full Version : CVE-2007-5794 (nss_ldap)


Heap
14-11-07, 18:40
Race condition in nss_ldap, when used in applications that use pthread and fork after a call to nss_ldap, does not properly handle the LDAP connection, which might cause nss_ldap to return the wrong user data to the wrong process. NOTE: this issue was originally reported for Dovecot with the wrong mailboxes being returned, but other applications might also be affected.

More... (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-5794)