Lucene search
FreeBSD38C76FCF-1744-11DA-978E-0001020EED82HistoryAug 22, 2005 - 12:00 a.m.
pam_ldap -- authentication bypass vulnerability
2005-08-2200:00:00
vuxml.freebsd.org
17
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.021 Low
EPSS
Percentile
89.3%
Luke Howard reports:
If a pam_ldap client authenticates against an LDAP server
that returns a passwordPolicyResponse control, but omits
the optional “error” field of the
PasswordPolicyResponseValue, then the LDAP authentication
result will be ignored and the authentication step will
always succeed.
Related
cert
cert
pam_ldap authentication bypass vulnerability
2005-08-24 00:00:00
f5
f5
K5716 : Authentication bypass in PAM LDAP module - CAN-2005-2641
2013-03-28 00:00:00
SOL6634 - pam_ldap vulnerability - CVE-2005-2641
2006-10-19 00:00:00
K6634 : pam_ldap vulnerability - CVE-2005-2641
2013-03-19 00:00:00
openvas
openvas
FreeBSD Ports: pam_ldap
2008-09-04 00:00:00
Gentoo Security Advisory GLSA 200508-22 (pam_ldap)
2008-09-24 00:00:00
FreeBSD Ports: pam_ldap
2008-09-04 00:00:00
nessus
nessus
Mandrake Linux Security Advisory : nss_ldap (MDKSA-2005:190)
2005-11-02 00:00:00
F5 Networks BIG-IP : pam_ldap vulnerability (SOL6634)
2014-10-10 00:00:00
gentoo
gentoo
pam_ldap: Authentication bypass vulnerability
2005-08-31 00:00:00
debian
debian
[SECURITY] [DSA 785-1] New libpam-ldap packages fix authentication bypass
2005-08-25 16:54:57
[SECURITY] [DSA 785-1] New libpam-ldap packages fix authentication bypass
2005-08-25 16:54:57
securityvulns
securityvulns
[SECURITY] [DSA 785-1] New libpam-ldap packages fix authentication bypass
2005-08-26 00:00:00
cvelist
cvelist
CVE-2005-2641
2005-08-21 04:00:00
osv
osv
libpam-ldap - authentication bypass
2005-08-25 00:00:00
nvd
nvd
CVE-2005-2641
2005-08-23 04:00:00
CVE-2005-2497
2005-10-07 18:02:00
cve
cve
CVE-2005-2641
2005-08-23 04:00:00
CVE-2005-2497
2005-10-07 18:02:00
debiancve
debiancve
CVE-2005-2641
2005-08-23 04:00:00
ubuntucve
ubuntucve
CVE-2005-2641
2005-08-23 00:00:00
centos
centos
compat, nss_ldap, openldap security update
2005-10-17 14:29:06
redhat
redhat
(RHSA-2005:767) openldap and nss_ldap security update
2005-10-17 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.021 Low
EPSS
Percentile
89.3%
Related for 38C76FCF-1744-11DA-978E-0001020EED82