EUVD-2005-2642

Malware in sbrugna...

CAN-2005-2641

The CAN-2005-2641 entry corresponds to a pam_ldap authentication bypass vulnerability. The connected documents confirm: the pam_ldap module before version 180 does not properly handle a new PasswordPolicyControl, enabling possible privilege escalation via authentication bypass. The impact stated ...

K6634: pam_ldap vulnerability - CVE-2005-2641

Security Advisory Description Note: Versions that are not listed in this article have not been evaluated for vulnerability to this security advisory. For information about the F5 security policy regarding evaluating older and unsupported versions of F5 products, refer to K4602: Overview of F5...

F5 Networks BIG-IP : pam_ldap password policy control vulnerability (SOL5725)

The remote BIG-IP device is missing a patch required by a security advisory. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5 Networks BIG-IP Solution SOL5725. The text description of this plugin is C F5 Networks...

FreeBSD Ports: pam_ldap

The remote host is missing an update to the system as announced in the referenced advisory. VID 38c76fcf-1744-11da-978e-0001020eed82 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: pam_ldap

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Debian Security Advisory DSA 785-1 (libpam-ldap)

The remote host is missing an update to libpam-ldap announced via advisory DSA 785-1. It has been discovered that libpam-ldap, the Pluggable Authentication Module allowing LDAP interfaces, ignores the result of an attempt to authenticate against an LDAP server that does not set an optional data...

CentOS 4 : openldap / nss_ldap (CESA-2005:767)

Updated openldap and nssldap packages that correct a potential password disclosure issue and possible authentication vulnerability are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenLDAP is an open source suite of LDAP...

Mandrake Linux Security Advisory : nss_ldap (MDKSA-2005:190)

A bug was found in the way the pamldap module processed certain failure messages. If the server includes supplemental data in an authentication failure result message, but the data does not include any specific error code, the pamldap module would proceed as if the authentication request had...

[SECURITY] [DSA 785-1] New libpam-ldap packages fix authentication bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 785-1 [email protected] http://www.debian.org/security/ Martin Schulze August 25th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 785-1] New libpam-ldap packages fix authentication bypass

-------------------------------------------------------------------------- Debian Security Advisory DSA 785-1 [email protected] http://www.debian.org/security/ Martin Schulze August 25th, 2005 http://www.debian.org/security/faq -...

CVE-2005-2641

Unknown vulnerability in pamldap before 180 does not properly handle a new password policy control, which could allow attackers to gain privileges. NOTE: CVE-2005-2497 had also been assigned to this issue, but CVE-2005-2641 is the correct candidate...

CVE-2005-2641

The connected materials corroborate CVE-2005-2641 as a pam_ldap authentication bypass vulnerability: pam_ldap before version 1.8.0 does not properly handle a new password policy control, enabling an attacker to gain privileges by redirecting authentication to another server with different TLS req...