CVE-2005-2641

描述

Unknown vulnerability in pam_ldap before 180 does not properly handle a new password policy control, which could allow attackers to gain privileges. NOTE: CVE-2005-2497 had also been assigned to this issue, but CVE-2005-2641 is the correct candidate.

如何修補 CVE-2005-2641

要修補 CVE-2005-2641,請將受影響套件升級到下列已修補版本。

• Debian/libpam-ldap—升級至 178-1sarge1 或更新版本

CVE-2005-2641 正在被利用嗎?

低 — EPSS 為 3.6%,目前沒有觀察到大規模利用活動。

受影響套件(1)

• from 0, < 178-1sarge1

參考連結(1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2005-2641