libpam-ldap: insecure password control
| Package(s): | libpam-ldap | CVE #(s): | CVE-2006-5170 | ||||||||||||||||||||||||
| Created: | November 3, 2006 | Updated: | December 21, 2006 | ||||||||||||||||||||||||
| Description: | Steve Rigler discovered that the PAM module for authentication against LDAP servers processes PasswordPolicyReponse control messages incorrectly, which might lead to an attacker being able to login into a suspended system account. | ||||||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||||||