CVE-2007-1840

Publication date 3 April 2007

Last updated 17 July 2025

Ubuntu priority

Medium

Why this priority?

Description

lib/modules.inc in LDAP Account Manager (LAM) before 1.3.0 does not escape HTML special characters in LDAP data, which allows remote attackers to have an unknown impact, probably cross-site scripting (XSS).

Status

Package Ubuntu Release Status
ldap-account-manager 9.10 karmic
Fixed 1.1.1-2
9.04 jaunty
Fixed 1.1.1-2
8.10 intrepid
Fixed 1.1.1-2
8.04 LTS hardy
Fixed 1.1.1-2
7.10 gutsy
Fixed 1.1.1-2
7.04 feisty
Fixed 1.1.1-2
6.10 edgy Ignored end of life, was needed
6.06 LTS dapper Ignored end of life

References

Other references

Access our resources on patching vulnerabilities