Race condition in nss_ldap, when used in applications that are linked against the pthread library and fork after a call to nss_ldap, might send user data to the wrong process because of improper handling of the LDAP connection. NOTE: this issue was originally reported for Dovecot with the wrong mailboxes being returned, but other applications might also be affected.
References
Configurations
History
No history.
Information
Published : 2007-11-13 23:46
Updated : 2024-02-28 11:01
NVD link : CVE-2007-5794
Mitre link : CVE-2007-5794
CVE.ORG link : CVE-2007-5794
JSON object : View
Products Affected
nss_ldap
- nss_ldap
CWE
CWE-362
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')