<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: padl software</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2006-0512: PADL MigrationTools 46 creates temporary files insecurely, which allows local users to overwrite arbitrary fil</title><link>https://patchthecve.com/cve/CVE-2006-0512.html</link><guid>https://patchthecve.com/cve/CVE-2006-0512.html</guid><pubDate>Tue, 16 Jun 2026 22:20:45 +0000</pubDate><description>LOW 2.1: PADL MigrationTools 46 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a symlink attack on the temporary files, which are not properly created by (1) migrate_all_online.sh, (2) migrate_all_offline.sh, (3) migrate_all_netinfo_online.sh, (4) migrate_all_ne</description></item><item><title>CVE-2005-4683: PADL MigrationTools 46, when a failure occurs, stores contents of /etc/shadow in a world-readable /tmp/nis.$$.</title><link>https://patchthecve.com/cve/CVE-2005-4683.html</link><guid>https://patchthecve.com/cve/CVE-2005-4683.html</guid><pubDate>Tue, 16 Jun 2026 22:19:14 +0000</pubDate><description>LOW 2.1: PADL MigrationTools 46, when a failure occurs, stores contents of /etc/shadow in a world-readable /tmp/nis.$$.ldif file, and possibly other sensitive information in other temporary files, which are not properly managed by (1) migrate_all_online.sh, (2) migrate_all_offline.sh, (3) migrate_all_netinfo</description></item><item><title>CVE-2003-0734: Unknown vulnerability in the pam_filter mechanism in pam_ldap before version 162, when LDAP based authenticati</title><link>https://patchthecve.com/cve/CVE-2003-0734.html</link><guid>https://patchthecve.com/cve/CVE-2003-0734.html</guid><pubDate>Tue, 16 Jun 2026 22:02:44 +0000</pubDate><description>HIGH 10.0: Unknown vulnerability in the pam_filter mechanism in pam_ldap before version 162, when LDAP based authentication is being used, allows users to bypass host-based access restrictions and log onto the system.</description></item><item><title>CVE-2002-0825: Buffer overflow in the DNS SRV code for nss_ldap before nss_ldap-198 allows remote attackers to cause a denial</title><link>https://patchthecve.com/cve/CVE-2002-0825.html</link><guid>https://patchthecve.com/cve/CVE-2002-0825.html</guid><pubDate>Tue, 16 Jun 2026 21:58:12 +0000</pubDate><description>HIGH 7.5: Buffer overflow in the DNS SRV code for nss_ldap before nss_ldap-198 allows remote attackers to cause a denial of service and possibly execute arbitrary code.</description></item><item><title>CVE-2002-0735: Format string vulnerability in the logging() function in C-Note Squid LDAP authentication module (squid_auth_L</title><link>https://patchthecve.com/cve/CVE-2002-0735.html</link><guid>https://patchthecve.com/cve/CVE-2002-0735.html</guid><pubDate>Tue, 16 Jun 2026 21:58:02 +0000</pubDate><description>HIGH 7.5: Format string vulnerability in the logging() function in C-Note Squid LDAP authentication module (squid_auth_LDAP) 2.0.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code by triggering log messages.</description></item><item><title>CVE-2002-0374: Format string vulnerability in the logging function for the pam_ldap PAM LDAP module before version 144 allows</title><link>https://patchthecve.com/cve/CVE-2002-0374.html</link><guid>https://patchthecve.com/cve/CVE-2002-0374.html</guid><pubDate>Tue, 16 Jun 2026 21:57:18 +0000</pubDate><description>HIGH 7.5: Format string vulnerability in the logging function for the pam_ldap PAM LDAP module before version 144 allows attackers to execute arbitrary code via format strings in the configuration file name.</description></item><item><title>CVE-2000-1045: nss_ldap earlier than 121, when run with nscd (name service caching daemon), allows remote attackers to cause </title><link>https://patchthecve.com/cve/CVE-2000-1045.html</link><guid>https://patchthecve.com/cve/CVE-2000-1045.html</guid><pubDate>Tue, 16 Jun 2026 21:53:02 +0000</pubDate><description>LOW 1.2: nss_ldap earlier than 121, when run with nscd (name service caching daemon), allows remote attackers to cause a denial of service via a flood of LDAP requests.</description></item></channel></rss>