oss-sec mailing list archives

Re: CVE request -- ucd-snmp / net-snmp, libnss-ldapd / nss_ldap

From: Vincent Danen <vdanen () redhat com>
Date: Tue, 24 Mar 2009 08:47:25 -0600

* [2009-03-23 13:21:42 +0100] Jan Lieskovsky wrote:

2, libnss-ldapd / nss_ldap: LDAP service configuration file
                                shipped with world readable permissions

References:https://bugzilla.redhat.com/show_bug.cgi?id=491623

  http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=520476


On a side note, this is pretty specific to libnss-ldapd and not so much
nss_ldap.

--

Vincent Danen / Red Hat Security Response Team