CVE-2007-5794: Nss LDAP

Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days.

Race condition in nss_ldap, when used in applications that are linked against the pthread library and fork after a call to nss_ldap, might send user data to the wrong process because of improper handling of the LDAP connection. NOTE: this issue was originally reported for Dovecot with the wrong mailboxes being returned, but other applications might also be affected.

Affected products

• Nss LDAP Nss LDAP: any version

Published 2007-11-13. Last modified 2026-06-16.