The remote host is missing an update to ldapscripts announced via advisory DSA 1517-1.

https://secure1.securityspace.com/smysecure/catid.html?in=DSA%201517-1

Don Armstrong discovered that ldapscripts, a suite of tools to manipulate user accounts in LDAP, sends the password as a command line argument when calling LDAP programs, which may allow a local attacker to read this password from the process listing. For the stable distribution (etch), this problem has been fixed in version 1.4-2etch1. The old stable distribution (sarge) does not contain an ldapscripts package. For the unstable distribution (sid), this problem has been fixed in version 1.7.1-2. We recommend that you upgrade your ldapscripts package.