CVE-2011-0438

nslcd/pam.c in the nss-pam-ldapd 0.8.0 PAM module returns a success code when a user is not found in LDAP, which allows remote attackers to bypass authentication...

CVE-2011-0438

CVE-2011-0438 affects the nss-pam-ldapd project: nslcd/pam.c in the 0.8.0 PAM module returns a success code when a user is not found in LDAP, enabling remote attackers to bypass authentication. The vulnerability is a direct authentication bypass caused by incorrect handling of non-existent users,...

CVE-2011-0438

nslcd/pam.c in the nss-pam-ldapd 0.8.0 PAM module returns a success code when a user is not found in LDAP, which allows remote attackers to bypass authentication...