CVE-2011-0438

nslcd/pam.c in the nss-pam-ldapd 0.8.0 PAM module returns a success code when a user is not found in LDAP, which allows remote attackers to bypass…

published March 15, 2011

CVSS
—
EPSS
2%
Percentile
74.3
In the wild
Unconfirmed
What it is

nslcd/pam.c in the nss-pam-ldapd 0.8.0 PAM module returns a success code when a user is not found in LDAP, which allows remote attackers to bypass authentication.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01527 · 74.3th percentile
Published
2011-03-15T17:00Z
EPSS history
Timeline
  • 15 MAR 17:00Z
    nslcd/pam.c in the nss-pam-ldapd 0.8.0 PAM module returns a success code when a user is not found in LDAP, which allows remote attackers to bypass…
    cvelistv5