CVE-2009-1073: Debian Linux

Medium severity, CVSS 5.5. EPSS: 1.1% chance of exploitation in the next 30 days.

nss-ldapd before 0.6.8 uses world-readable permissions for the /etc/nss-ldapd.conf file, which allows local users to obtain a cleartext password for the LDAP server by reading the bindpw field.

Affected products

• Debian Debian Linux: version 5.0 only
• Debian Nss-LDAP: before 0.6.8 (fixed in 0.6.8)

Published 2009-03-31. Last modified 2026-06-16.