CVE-2005-2641

HIGH 7.5CVE-2005-2641 · Published 23/08/2005 · updated 16/06/2026

In short

CVE-2005-2641 is a HIGH (CVSS 7.5) vulnerability affecting pam ldap (padl software).
Chance of exploitation in the next 30 days (EPSS): 3.6%, higher than 89.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
pam ldap padl_software	`≤ build_178`	No fix yet

Description

Unknown vulnerability in pam_ldap before 180 does not properly handle a new password policy control, which could allow attackers to gain privileges. NOTE: CVE-2005-2497 had also been assigned to this issue, but CVE-2005-2641 is the correct candidate.

References

secunia.com/advisories/17233
secunia.com/advisories/17270
kb.cert.org/vuls/id/778916 · US Government Resource
mandriva.com/security/advisories
redhat.com/support/errata/RHSA-2005-767.html
securityfocus.com/archive/1/447859/100/200/threaded
securityfocus.com/bid/14649
issues.rpath.com/browse/RPL-680
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10370
redhat.com/archives/fedora-test-list/2005-August/msg00170.html

More vulnerabilities in pam ldap

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free