• info
• discussion
• exploit
• solution
• references

PADL Software PAM_LDAP Authentication Bypass Vulnerability

PAM_LDAP is prone to an authentication-bypass vulnerability when handling new password policy control. This could allow an unauthorized user to bypass authentication.

This vulnerability was reported to affect PAM_LDAP builds 169 through 179.