CVE-2006-7191: LDAP Account Manager

High severity, CVSS 7.2. EPSS: 0.3% chance of exploitation in the next 30 days.

Untrusted search path vulnerability in lamdaemon.pl in LDAP Account Manager (LAM) before 1.0.0 allows local users to gain privileges via a modified PATH that points to a malicious rm program.

Affected products

• LDAP Account Manager LDAP Account Manager: up to and including 1.0_rc2

Published 2007-04-03. Last modified 2026-06-16.