CVE-2007-5794: Race condition in nss_ldap, when used in applications that are linked against the pthread library and fork aft

Routine

MEDIUM 4.3MITIGATE

CVE-2007-5794 is a medium-severity flaw (CVSS 4.3) affecting nss ldap. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Race condition in nss_ldap, when used in applications that are linked against the pthread library and fork after a call to nss_ldap, might send user data to the wrong process because of improper handling of the LDAP connection. NOTE: this issue was originally reported for Dovecot with the wrong mailboxes being returned, but other applications might also be affected.

Why this priority

No elevated risk signals yet

No fix is published yet: follow the downgrade or mitigation steps.

Risk facts

CVSS score	4.3 (Medium)
EPSS exploit chance	1.2% (top 33%)
CISA exploited list	No
Weakness	CWE-362
Published	2007-11-13
Last modified	2026-06-16

Publisher (CNA): Red Hat, Inc. · Vendor: nss ldap

Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2007-11-13 23:46 UTCPublished CVE record published
2026-06-16 22:46 UTCUpdated Record last modified

nss ldap nss ldap MITIGATE

Affected: all versions

Fixed in: no fixed release known

Safe to downgrade to: no unaffected older release

1. Check installed version

apt-cache policy nss-ldap || rpm -q nss-ldap || nss-ldap --version

No fixed or unaffected release known

Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2007-5794?

nss ldap: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.

Is CVE-2007-5794 being exploited?

CVE-2007-5794 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2007-5794 affect?

CVE-2007-5794 affects nss ldap. Severity is medium (CVSS 4.3). Race condition in nss_ldap, when used in applications that are linked against the pthread library and fork after a call to nss_ldap, might send user data to the wrong process because of improper handling of the LDAP connection. NOTE: this i

How urgent is CVE-2007-5794?

Priority 32/100. No elevated risk signals yet.

Software pages

Dovecot vulnerabilities

Related CVEs

CVE-2005-2069 MEDIUM 5.0 MITIGATE MITIGATE pam_ldap and nss_ldap, when used with OpenLDAP and connecting to a slave using TLS, does not use TLS for the s
CVE-2002-0825 HIGH 7.5 UPGRADE Buffer overflow in the DNS SRV code for nss_ldap before nss_ldap-198 allows remote attackers to cause a denial
CVE-2002-0735 HIGH 7.5 DOWNGRADE DOWNGRADE Format string vulnerability in the logging() function in C-Note Squid LDAP authentication module (squid_auth_L
CVE-2000-1045 LOW 1.2 DOWNGRADE nss_ldap earlier than 121, when run with nscd (name service caching daemon), allows remote attackers to cause

References

← Back to latest CVEs