7.5
CVSSv2

CVE-2005-2641

Published: 23/08/2005 Updated: 19/10/2018
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Unknown vulnerability in pam_ldap prior to 180 does not properly handle a new password policy control, which could allow malicious users to gain privileges. NOTE: CVE-2005-2497 had also been assigned to this issue, but CVE-2005-2641 is the correct candidate.

Vulnerable Product Search on Vulmon Subscribe to Product

padl software pam ldap

Vendor Advisories

Synopsis openldap and nss_ldap security update Type/Severity Security Advisory: Moderate Topic Updated openldap and nss_ldap packages that correct a potential password disclosure issue and possible authentication vulnerability are now available This update has been rated as having moderate security impact ...