SOL5716 - Authentication bypass in PAM LDAP module - CAN-2005-2641

Vulnerability description:

Vulnerability in pam_ldap before 180 does not properly handle a new password policy control, which could allow attackers to gain privileges.

Information about this advisory is available at the following locations:

• US-CERT Vulnerability Note VU#778916 pam_ldap authentication bypass vulnerability:
  <http://www.kb.cert.org/vuls/id/778916&gt;
• CAN-2005-2641- pam_ldap does not properly handle a new password policy control:
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=2005-2641&gt;
• JP Vendor Status Notes JVNVU#778916:
  <http://jvn.jp/cert/JVNVU%23778916/&gt;