Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

String format bug in pam_ldap logging

Package(s):

nss_ldap

CVE #(s):

CAN-2002-0374

Created:

June 5, 2002

Updated:

October 29, 2002

Description:

The nss_ldap package includes the pam_ldap module for authenticating a user with an LDAP database. Pam_ldap versions prior to 144 have a string format bug in the logging mechanism.

Alerts:

SCO Group	CSSA-2002-041.0	2002-10-28
Yellow Dog	YDU-20020606-2	2002-06-06
Red Hat	RHSA-2002:084-17	2002-05-26
Eridani	ERISA-2002:019	2002-05-28

(Log in to post comments)