Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/libnss-ldap@186-1
purl pkg:deb/debian/libnss-ldap@186-1
Next non-vulnerable version 261-2.1
Latest non-vulnerable version 261-2.1
Risk
Vulnerabilities affecting this package (4)
Vulnerability Summary Fixed by
VCID-9rsx-6k6h-dbfv
Aliases:
CVE-2005-2069
pam_ldap and nss_ldap, when used with OpenLDAP and connecting to a slave using TLS, does not use TLS for the subsequent connection if the client is referred to a master, which may cause a password to be sent in cleartext and allows remote attackers to sniff the password.
251-7.5
Affected by 1 other vulnerability.
VCID-awj9-73b1-tkhb
Aliases:
CVE-2007-5794
Race condition in nss_ldap, when used in applications that are linked against the pthread library and fork after a call to nss_ldap, might send user data to the wrong process because of improper handling of the LDAP connection. NOTE: this issue was originally reported for Dovecot with the wrong mailboxes being returned, but other applications might also be affected.
261-2.1
Affected by 0 other vulnerabilities.
VCID-q75a-mawp-9feg
Aliases:
CVE-2002-0825
Buffer overflow in the DNS SRV code for nss_ldap before nss_ldap-198 allows remote attackers to cause a denial of service and possibly execute arbitrary code.
238-1sarge1
Affected by 2 other vulnerabilities.
VCID-wdpx-y7f6-wbhf
Aliases:
CVE-2003-0734
Unknown vulnerability in the pam_filter mechanism in pam_ldap before version 162, when LDAP based authentication is being used, allows users to bypass host-based access restrictions and log onto the system.
238-1sarge1
Affected by 2 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-06T04:09:43.753725+00:00 Debian Oval Importer Affected by VCID-wdpx-y7f6-wbhf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0
2026-06-06T03:55:48.934586+00:00 Debian Oval Importer Affected by VCID-awj9-73b1-tkhb https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0
2026-06-06T00:56:58.788767+00:00 Debian Oval Importer Affected by VCID-9rsx-6k6h-dbfv https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0
2026-06-06T00:49:32.224071+00:00 Debian Oval Importer Affected by VCID-q75a-mawp-9feg https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0