CVE-2007-5373: Ldapscripts

Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days.

ldapscripts 1.4 and 1.7 sends a password as a command line argument when calling some LDAP programs, which might allow local users to read the password by listing the process and its arguments, as demonstrated by a call to ldappasswd in the _changepassword function.

Affected products

• Ldapscripts Ldapscripts: version 1.4 only; version 1.7 only

Published 2007-10-11. Last modified 2026-06-16.