Lucene search

K
freebsdFreeBSD3A81017A-8154-11DC-9283-0016179B2DD5
HistoryOct 09, 2007 - 12:00 a.m.

ldapscripts -- Command Line User Credentials Disclosure

2007-10-0900:00:00
vuxml.freebsd.org
11

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

EPSS

0

Percentile

5.1%

Ganael Laplanche reports:

Up to now, each ldap* command was called with the -w parameter,
which allows to specify the bind password on the command line.
Unfortunately, this could make the password appear to anybody
performing a ps during the call. This is now avoided by using
the -y parameter and a password file.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchldapscripts< 1.7.1UNKNOWN

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

EPSS

0

Percentile

5.1%

Related for 3A81017A-8154-11DC-9283-0016179B2DD5