{"id":"CVE-2007-5373","details":"ldapscripts 1.4 and 1.7 sends a password as a command line argument when calling some LDAP programs, which might allow local users to read the password by listing the process and its arguments, as demonstrated by a call to ldappasswd in the _changepassword function.","modified":"2026-04-10T03:39:17.591481Z","published":"2007-10-11T10:17:00Z","references":[{"type":"ADVISORY","url":"http://secunia.com/advisories/27111"},{"type":"ADVISORY","url":"http://secunia.com/advisories/29395"},{"type":"ADVISORY","url":"http://www.debian.org/security/2008/dsa-1517"},{"type":"WEB","url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=445582"},{"type":"WEB","url":"http://www.securityfocus.com/bid/25982"},{"type":"WEB","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/37029"}],"schema_version":"1.7.5"}