CVE-2007-5170

Sun Fire X2100 M2 and X2200 M2 Embedded Lights Out Manager (ELOM) before firmware 3.09 contain an unspecified vulnerability that allows remote attackers to send arbitrary network traffic and use ELOM as a spam proxy. The description is explicit but does not provide exploit vectors, affected compo...

[SECURITY] [DSA 1203-1] New libpam-ldap packages fix access control bypass

-------------------------------------------------------------------------- Debian Security Advisory DSA 1203-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 2nd, 2006 http://www.debian.org/security/faq -...

CVE-2006-5170

pamldap in nssldap on Red Hat Enterprise Linux 4, Fedora Core 3 and earlier, and possibly other distributions does not return an error condition when an LDAP directory server responds with a PasswordPolicyResponse control response, which causes the pamauthenticate function to return a success cod...

CVE-2006-5170

pamldap in nssldap on Red Hat Enterprise Linux 4, Fedora Core 3 and earlier, and possibly other distributions does not return an error condition when an LDAP directory server responds with a PasswordPolicyResponse control response, which causes the pamauthenticate function to return a success cod...

CVE-2006-5170

CVE-2006-5170 affects pam_ldap in nss_ldap; a PasswordPolicyResponse control could cause pam_authenticate to return success even if authentication failed. Affected platforms include Red Hat Enterprise Linux 4 and Fedora Core 3 and earlier. The issue arises when applications do not properly proces...