OSVDB ID: 17692

Title: OpenLDAP / pam_ldap TLS Connection Cleartext Password Disclosure

Info

Disclosure

Jun 21, 2005

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Unknown or Incomplete

Classification

Attack Type: Cryptographic, Information Disclosure
Impact: Loss of Confidentiality
Disclosure: Vendor Verified

Solution

Unknown or Incomplete

Products

Unknown or Incomplete

References

Secunia Advisory ID: 15906 15920 16076 16113 16161 16804 17233 17335 17845 21520
CVE ID: 2005-2069 (see also: NVD)
Vendor Specific Advisory URL: ftp://patches.sgi.com/support/free/security/advisories/20051003-01-U.asc http://support.avaya.com/elmodocs2/security/ASA-2006-156.htm
Mail List Post: http://archives.neohapsis.com/archives/fulldisclosure/2005-07/0060.html
Other Advisory URL: http://frontal1.mandriva.com/security/advisories?name=MDKSA-2005:121
http://lists.suse.com/archive/suse-security-announce/2005-Sep/0004.html
http://www.gentoo.org/security/en/glsa/glsa-200507-13.xml
http://www.trustix.org/errata/2005/0031/
http://www.ubuntulinux.org/support/documentation/usn/usn-152-1
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=161990
Vendor Specific News/Changelog Entry: http://www.openldap.org/its/index.cgi/Incoming?id=3791
RedHat RHSA: RHSA-2005:767

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/17692