CVE-2006-5170
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 4.1%
pam_ldap in nss_ldap on Red Hat Enterprise Linux 4, Fedora Core 3 and earlier, and possibly other distributions does not return an error condition when an LDAP directory server responds with a PasswordPolicyResponse control response, which causes the pam_authenticate function to return a success code even if authentication has failed, as originally reported for xscreensaver.
Produtos afetados
n/a · n/aReferências
http://bugzilla.padl.com/show_bug.cgi?id=291http://rhn.redhat.com/errata/RHSA-2006-0719.htmlhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=207286http://secunia.com/advisories/22682http://secunia.com/advisories/22685http://secunia.com/advisories/22694http://secunia.com/advisories/22696http://secunia.com/advisories/22869http://secunia.com/advisories/23132http://secunia.com/advisories/23428http://security.gentoo.org/glsa/glsa-200612-19.xmlhttp://securitytracker.com/id?1017153