Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

libpam-ldap: authentication bypass

Package(s):

libpam-ldap

CVE #(s):

CAN-2005-2641

Created:

August 25, 2005

Updated:

October 6, 2006

Description:

libpam-ldap, the PAM LDAP interface, has a vulnerability in which it fails to authenticate with an LDAP server which is not configured properly, allowing an authentication bypass.

Alerts:

rPath	rPSA-2006-0183-1	2006-10-05
Mandriva	MDKSA-2005:190	2005-10-20
Gentoo	200508-22	2005-08-31
Debian	DSA-785-1	2005-08-25

(Log in to post comments)