Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2005-2069HistoryJun 30, 2005 - 4:00 a.m.
CVE-2005-2069
2005-06-3004:00:00
Debian Security Bug Tracker
security-tracker.debian.org
9
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.009 Low
EPSS
Percentile
82.8%
pam_ldap and nss_ldap, when used with OpenLDAP and connecting to a slave using TLS, does not use TLS for the subsequent connection if the client is referred to a master, which may cause a password to be sent in cleartext and allows remote attackers to sniff the password.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 11 | all | libnss-ldap | < 238-1.1 | libnss-ldap_238-1.1_all.deb |
| Debian | 11 | all | libpam-ldap | < 178-1sarge1 | libpam-ldap_178-1sarge1_all.deb |
Related
securityvulns
securityvulns
openvas
openvas
SLES9: Security update for openldap2-client,openldap2-devel
2009-10-10 00:00:00
Gentoo Security Advisory GLSA 200507-13 (pam_ldap nss_ldap)
2008-09-24 00:00:00
SLES9: Security update for pam_ldap
2009-10-10 00:00:00
nvd
nvd
CVE-2005-2069
2005-06-30 04:00:00
cve
cve
CVE-2005-2069
2005-06-30 04:00:00
cvelist
cvelist
CVE-2005-2069
2005-06-29 04:00:00
ubuntu
ubuntu
PAM/NSS LDAP vulnerabilitiy
2005-07-21 00:00:00
nessus
nessus
GLSA-200507-13 : pam_ldap and nss_ldap: Plain text authentication leak
2005-07-14 00:00:00
Ubuntu 4.10 / 5.04 : openldap2, libpam-ldap, libnss-ldap vulnerabilities (USN-152-1)
2006-01-15 00:00:00
CentOS 4 : openldap / nss_ldap (CESA-2005:767)
2006-07-05 00:00:00
gentoo
gentoo
pam_ldap and nss_ldap: Plain text authentication leak
2005-07-14 00:00:00
cbl_mariner
cbl_mariner
CVE-2005-2069 affecting package openldap 2.4.50-1
2021-04-06 23:50:10
ubuntucve
ubuntucve
CVE-2005-2069
2005-06-30 00:00:00
redhat
redhat
(RHSA-2005:751) openldap and nss_ldap security update
2005-10-17 00:00:00
(RHSA-2005:767) openldap and nss_ldap security update
2005-10-17 00:00:00
centos
centos
compat, nss_ldap, openldap security update
2005-10-17 14:29:06
nss_ldap, openldap security update
2005-10-18 04:23:45
xloadimage security update
2005-10-18 16:28:19
osv
osv
libpam-ldap - authentication bypass
2005-08-25 00:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.009 Low
EPSS
Percentile
82.8%
Related for DEBIANCVE:CVE-2005-2069