CVE-2005-2069: Medium severity Padl Nss Ldap vulnerability
pamldap and nssldap, when used with OpenLDAP and connecting to a slave using TLS, does not use TLS for the subsequent connection if the client is referred to a master, which may cause a password to be sent in cleartext and allows remote attackers to sniff the password.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-2069?
CVE-2005-2069 is categorized as a medium-severity vulnerability due to the possibility of password exposure.
How do I fix CVE-2005-2069?
To fix CVE-2005-2069, ensure that your application is configured to use TLS for all connections, including those to a master server.
Which software is affected by CVE-2005-2069?
CVE-2005-2069 affects PADL's pam_ldap and nss_ldap libraries when used with OpenLDAP.
Can CVE-2005-2069 lead to data breaches?
Yes, CVE-2005-2069 can lead to data breaches as it allows passwords to be transmitted in cleartext.
What happens if CVE-2005-2069 is exploited?
If exploited, CVE-2005-2069 allows remote attackers to sniff user passwords during the connection process.