Debian Security Advisory 1758-1 - Leigh James that discovered that nss-ldapd, an NSS module for using LDAP as a naming service, by default creates the configuration file /etc/nss-ldapd.conf world-readable which could leak the configured LDAP password if one is used for connecting to the LDAP server.
3482db6bd388e318f9f09628d19de5e80409cc0a347911f98bdff01d0d965caf