PT-2009-1033 · Nss Ldap · Nss Ldap

Vincent Danen · Published 2009-03-31 · Updated 2024-02-15 · CVE-2009-1073

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions nss-ldapd versions prior to 0.6.8

Description The issue is related to errors in privilege management, allowing a local user to obtain the cleartext password for the LDAP server. This can be achieved by reading the bindpw field from the /etc/nss-ldapd.conf file, which has world-readable permissions. The exploitation of this issue may lead to a breach of confidentiality of protected information.

Recommendations For versions prior to 0.6.8, update to version 0.6.8 or later to resolve the issue. As a temporary workaround, consider changing the permissions of the /etc/nss-ldapd.conf file to restrict access to sensitive information.

Exploit

Fix

Incorrect Permission

Weakness Enumeration

CWE-264

CWE-732

Related Identifiers

BDU:2015-03469

BDU:2019-03974

CVE-2009-1073

DSA-1758-1

Affected Products

Nss Ldap

References · 22

• 🔥 http://arthurenhella.demon.nl/viewvc/nss-ldapd/nss-ldapd/debian/libnss-ldapd.postinst?r1=795&r2=813 · Exploit
• https://bdu.fstec.ru/vul/2019-03974 · Security Note
• https://bdu.fstec.ru/vul/2015-03469 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2009-1073 · Security Note
• https://wiki.astralinux.ru/pages/viewpage.action?pageId=44892734 · Vendor Advisory
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=520476 · Patch
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1073 · Security Note
• https://debian.org/security/2009/dsa-1758 · Vendor Advisory
• http://debian.org/security/dsa-1758 · Note
• http://launchpad.net/bugs/cve/2009-1073 · Note
• http://arthurenhella.demon.nl/viewvc/nss-ldapd/nss-ldapd/man/nss-ldapd.conf.5.xml?r1=805&r2=806 · Note
• http://openwall.com/lists/oss-security/2009/03/25/3 · Note
• https://securityfocus.com/bid/34211/solution · Note
• http://secunia.com/advisories/34523 · Note
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=520476 · Note