Lucene search
GoogleOSV:DSA-785-1HistoryAug 25, 2005 - 12:00 a.m.
libpam-ldap - authentication bypass
2005-08-2500:00:00
Google
osv.dev
14
0.021 Low
EPSS
Percentile
89.3%
It has been discovered that libpam-ldap, the Pluggable Authentication
Module allowing LDAP interfaces, ignores the result of an attempt to
authenticate against an LDAP server that does not set an optional data
field.
The old stable distribution (woody) is not affected by this problem.
For the stable distribution (sarge) this problem has been fixed in
version 178-1sarge1.
For the unstable distribution (sid) this problem has been fixed in
version 178-1sarge1.
We recommend that you upgrade your libpam-ldap package.
| CPE | Name | Operator | Version |
|---|---|---|---|
| libpam-ldap | eq | 178-1 |
References
Related
nessus
nessus
RHEL 4 : openldap and nss_ldap (RHSA-2005:767)
2005-10-19 00:00:00
Debian DSA-785-1 : libpam-ldap - authentication bypass
2005-08-30 00:00:00
CentOS 4 : openldap / nss_ldap (CESA-2005:767)
2006-07-05 00:00:00
centos
centos
compat, nss_ldap, openldap security update
2005-10-17 14:29:06
nss_ldap, openldap security update
2005-10-17 10:35:43
xloadimage security update
2005-10-18 16:28:19
openvas
openvas
Debian: Security Advisory (DSA-785-1)
2008-01-17 00:00:00
SLES9: Security update for pam_ldap
2009-10-10 00:00:00
Gentoo Security Advisory GLSA 200507-13 (pam_ldap nss_ldap)
2008-09-24 00:00:00
redhat
redhat
(RHSA-2005:767) openldap and nss_ldap security update
2005-10-17 00:00:00
(RHSA-2005:751) openldap and nss_ldap security update
2005-10-17 00:00:00
securityvulns
securityvulns
gentoo
gentoo
pam_ldap and nss_ldap: Plain text authentication leak
2005-07-14 00:00:00
pam_ldap: Authentication bypass vulnerability
2005-08-31 00:00:00
cbl_mariner
cbl_mariner
CVE-2005-2069 affecting package openldap 2.4.50-1
2021-04-06 23:50:10
ubuntucve
ubuntucve
CVE-2005-2069
2005-06-30 00:00:00
CVE-2005-2641
2005-08-23 00:00:00
debiancve
debiancve
CVE-2005-2069
2005-06-30 04:00:00
CVE-2005-2641
2005-08-23 04:00:00
ubuntu
ubuntu
PAM/NSS LDAP vulnerabilitiy
2005-07-21 00:00:00
f5
f5
SOL6634 - pam_ldap vulnerability - CVE-2005-2641
2006-10-19 00:00:00
K6634 : pam_ldap vulnerability - CVE-2005-2641
2013-03-19 00:00:00
SOL5716 - Authentication bypass in PAM LDAP module - CAN-2005-2641
2007-05-16 00:00:00
nvd
nvd
cve
cve
cvelist
cvelist
CVE-2005-2069
2005-06-29 04:00:00
CVE-2005-2641
2005-08-21 04:00:00
cert
cert
pam_ldap authentication bypass vulnerability
2005-08-24 00:00:00
freebsd
freebsd
pam_ldap -- authentication bypass vulnerability
2005-08-22 00:00:00
debian
debian
[SECURITY] [DSA 785-1] New libpam-ldap packages fix authentication bypass
2005-08-25 16:54:57
[SECURITY] [DSA 785-1] New libpam-ldap packages fix authentication bypass
2005-08-25 16:54:57