CVE-2007-5373

ldapscripts 1.4 and 1.7 sends a password as a command line argument when calling some LDAP programs, which might allow local users to read the password by…

published October 11, 2007

CVSS
—
EPSS
0%
Percentile
26.1
In the wild
Unconfirmed
What it is

ldapscripts 1.4 and 1.7 sends a password as a command line argument when calling some LDAP programs, which might allow local users to read the password by listing the process and its arguments, as demonstrated by a call to ldappasswd in the _changepassword function.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00341 · 26.1th percentile
Published
2007-10-11T10:00Z
EPSS history
Timeline
  • 11 OCT 10:00Z
    ldapscripts 1.4 and 1.7 sends a password as a command line argument when calling some LDAP programs, which might allow local users to read the password by…
    cvelistv5