CVE-2005-2641 Unknown vulnerability in pam_ldap before 180 does not properly handle a new password policy control, which could allow attackers to gain privileges. NOTE: CVE-2005-2497 had also been assigned to this....
HighCVSS 7.5
EPSS 3.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unknown vulnerability in pam_ldap before 180 does not properly handle a new password policy control, which could allow attackers to gain privileges. NOTE: CVE-2005-2497 had also been assigned to this issue, but CVE-2005-2641 is the correct candidate.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| padl software pam ldap | <= build_178 | No fix listed |
| debian/libpam-ldap(Debian:11) | < 178-1sarge1 | 178-1sarge1 |
References
- 17233 third-party-advisory
- 17270 third-party-advisory
- VU#778916 third-party-advisory us-government-resource
- MDKSA-2005:190 vendor-advisory
- RHSA-2005:767 vendor-advisory
- 20061005 rPSA-2006-0183-1 nss_ldap mailing-list
- 14649 vdb-entry
- issues.rpath.com
- oval:org.mitre.oval:def:10370 signature vdb-entry
- www.redhat.com
- security-tracker.debian.org vendor-advisory