← Database

CVE-2007-5794

MEDIUM CVSS: 4.3 Published: 2007-11-13 Modified: 2026-06-16

Description

Race condition in nss_ldap, when used in applications that are linked against the pthread library and fork after a call to nss_ldap, might send user data to the wrong process because of improper handling of the LDAP connection. NOTE: this issue was originally reported for Dovecot with the wrong mailboxes being returned, but other applications might also be affected.

Affected Platforms

Nss Ldap Nss Ldap

Weakness Type

CWE-362

References