Skip to content
OpenAdvisories
Unscored DSA-785-1 2 CVEs

libpam-ldap - authentication bypass

Published Aug 25, 2005 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 3.1 libpam-ldap 178-1sarge1

Vulnerabilities 2

  • Unscored —

    pam_ldap and nss_ldap, when used with OpenLDAP and connecting to a slave using TLS, does not use TLS for the subsequent…

  • Unscored —

    Unknown vulnerability in pam_ldap before 180 does not properly handle a new password policy control, which could allow …