Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-0438
HistoryMar 15, 2011 - 12:00 a.m.

CVE-2011-0438

2011-03-1500:00:00
ubuntu.com
ubuntu.com
11

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.016 Low

EPSS

Percentile

87.3%

nslcd/pam.c in the nss-pam-ldapd 0.8.0 PAM module returns a success code
when a user is not found in LDAP, which allows remote attackers to bypass
authentication.

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.016 Low

EPSS

Percentile

87.3%

Related for UB:CVE-2011-0438