MiracleLinux 3 : nss_ldap-253-12AXS3 (AXSA:2008-276:03)

The remote MiracleLinux 3 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2008-276:03 advisory. The nssldap package contains the nssldap and pamldap modules. The nssldap module is a plug-in which allows applications to retrieve information about users an...

RHSA-2005:767 Red Hat Security Advisory: openldap and nss_ldap security update

Bulletin has no description...

The vulnerability of the NSS-LDAP operating system packages for Astra Linux and Debian GNU/Linux allows a hacker to obtain the server LDAP administrator password.

The vulnerability of the NSS-LDAP operating system packages for Astra Linux and Debian GNU/Linux is related to privilege management errors. Exploiting this vulnerability could allow a malicious individual to obtain the server LDAP administrator password...

security flaw

pamldap in nssldap on Red Hat Enterprise Linux 4, Fedora Core 3 and earlier, and possibly other distributions does not return an error condition when an LDAP directory server responds with a PasswordPolicyResponse control response, which causes the pamauthenticate function to return a success cod...

CVE-2006-5170

pamldap in nssldap on Red Hat Enterprise Linux 4, Fedora Core 3 and earlier, and possibly other distributions does not return an error condition when an LDAP directory server responds with a PasswordPolicyResponse control response, which causes the pamauthenticate function to return a success cod...

DEBIAN-CVE-2005-2069

pamldap and nssldap, when used with OpenLDAP and connecting to a slave using TLS, does not use TLS for the subsequent connection if the client is referred to a master, which may cause a password to be sent in cleartext and allows remote attackers to sniff the password...

CVE-2002-0825

Buffer overflow in the DNS SRV code for nssldap before nssldap-198 allows remote attackers to cause a denial of service and possibly execute arbitrary code...

CVE-2002-0825

Buffer overflow in the DNS SRV code for nssldap before nssldap-198 allows remote attackers to cause a denial of service and possibly execute arbitrary code...