7.5

CVE-2006-5170

pam_ldap in nss_ldap on Red Hat Enterprise Linux 4, Fedora Core 3 and earlier, and possibly other distributions does not return an error condition when an LDAP directory server responds with a PasswordPolicyResponse control response, which causes the pam_authenticate function to return a success code even if authentication has failed, as originally reported for xscreensaver.

Data is provided by the National Vulnerability Database (NVD)
Fedoraproject ≫ Fedora Core Version <= core_3.0
Redhat ≫ Enterprise Linux Version4.0 Editionlinux_kernel_2.6.9
Redhat ≫ Enterprise Linux Version4.0
Debian ≫ Debian Linux Version3.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 3.51% 0.872
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-755 Improper Handling of Exceptional Conditions

The product does not handle or incorrectly handles an exceptional condition.

https://issues.rpath.com/browse/RPL-680
Third Party Advisory
Broken Link
http://bugzilla.padl.com/show_bug.cgi?id=291
Vendor Advisory
Broken Link
Issue Tracking
http://securitytracker.com/id?1017153
Third Party Advisory
VDB Entry
http://www.debian.org/security/2006/dsa-1203
Patch
Vendor Advisory
Issue Tracking
http://www.securityfocus.com/bid/20880
Third Party Advisory
VDB Entry
http://www.trustix.org/errata/2006/0061/
Third Party Advisory
Broken Link