{"action":"Upgrade libnss-db to 2.2.3pre1-3.2 or later.","affected":[{"fixed":"2.2.3pre1-3.2","introduced":"0"}],"component":"libnss-db","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["2.2.3pre1-3.2"],"id":"tcs_01M5N9GPQY9DAJE88N1917ZXP5","modified_at":"2026-10-23T17:47:26.191596886Z","published_at":"2010-04-05T15:30:01.187Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2010-0826","https://security-tracker.debian.org/tracker/CVE-2010-0826"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2010-0826","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2010-0826"}],"summary":"The Free Software Foundation (FSF) Berkeley DB NSS module (aka libnss-db) 2.2.3pre1 reads the DB_CONFIG file in the current working directory, which allows local users to obtain sensitive information"}