Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 19:31:55 +0000 CERTA-2009-AVI-127 — Une vulnérabilité de nss-ldapd permet à un utilisateur malveillant de lire des informations sensibles. https://vulnerability.circl.lu/vuln/CERTA-2009-AVI-127 CERTA-2009-AVI-127 https://vulnerability.circl.lu/vuln/CERTA-2009-AVI-127 bdu:2015-03469 https://vulnerability.circl.lu/vuln/bdu:2015-03469 bdu:2015-03469 https://vulnerability.circl.lu/vuln/bdu:2015-03469 fkie_cve-2009-1073 https://vulnerability.circl.lu/vuln/fkie_cve-2009-1073 <p>nss-ldapd before 0.6.8 uses world-readable permissions for the /etc/nss-ldapd.conf file, which allows local users to obtain a cleartext password for the LDAP server by reading the bindpw field.</p> <p>nss-ldapd before 0.6.8 uses world-readable permissions for the /etc/nss-ldapd.conf file, which allows local users to obtain a cleartext password for the LDAP server by reading the bindpw field.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2009-1073 GHSA-cx3j-8rc2-m25x https://vulnerability.circl.lu/vuln/ghsa-cx3j-8rc2-m25x <p>nss-ldapd before 0.6.8 uses world-readable permissions for the /etc/nss-ldapd.conf file, which allows local users to obtain a cleartext password for the LDAP server by reading the bindpw field.</p> <p>nss-ldapd before 0.6.8 uses world-readable permissions for the /etc/nss-ldapd.conf file, which allows local users to obtain a cleartext password for the LDAP server by reading the bindpw field.</p> https://vulnerability.circl.lu/vuln/ghsa-cx3j-8rc2-m25x gsd-2009-1073 https://vulnerability.circl.lu/vuln/gsd-2009-1073 gsd-2009-1073 https://vulnerability.circl.lu/vuln/gsd-2009-1073