The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
ldapscripts 1.4 and 1.7 sends a password as a command line argument when calling some LDAP programs, which might allow local users to read the password by listing the process and its arguments, as demonstrated by a call to ldappasswd in the _changepassword function.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ldapscripts | Jul 30, 2024 | Oct 11, 2007 |
| Freebsd | — | Upgrade ldapscripts | Dec 10, 2025 | Oct 23, 2007 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub