• info
• discussion
• exploit
• solution
• references

PADL Software Pam_Ldap PasswordPolicyResponse Authentication Bypass Vulnerability

Solution:
Please see the referenced advisories for more information.


Padl Software pam_ldap Build 178

• Debian libpam-ldap_178-1sarge3_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/libp/libpam-ldap/libpam-l dap_178-1sarge3_alpha.deb


• Debian libpam-ldap_178-1sarge3_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/libp/libpam-ldap/libpam-l dap_178-1sarge3_amd64.deb


• Debian libpam-ldap_178-1sarge3_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/libp/libpam-ldap/libpam-l dap_178-1sarge3_arm.deb


• Debian libpam-ldap_178-1sarge3_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/libp/libpam-ldap/libpam-l dap_178-1sarge3_hppa.deb


• Debian libpam-ldap_178-1sarge3_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/libp/libpam-ldap/libpam-l dap_178-1sarge3_i386.deb


• Debian libpam-ldap_178-1sarge3_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/libp/libpam-ldap/libpam-l dap_178-1sarge3_ia64.deb


• Debian libpam-ldap_178-1sarge3_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/libp/libpam-ldap/libpam-l dap_178-1sarge3_m68k.deb


• Debian libpam-ldap_178-1sarge3_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/libp/libpam-ldap/libpam-l dap_178-1sarge3_mips.deb


• Debian libpam-ldap_178-1sarge3_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/libp/libpam-ldap/libpam-l dap_178-1sarge3_mipsel.deb


• Debian libpam-ldap_178-1sarge3_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/libp/libpam-ldap/libpam-l dap_178-1sarge3_powerpc.deb


• Debian libpam-ldap_178-1sarge3_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/libp/libpam-ldap/libpam-l dap_178-1sarge3_s390.deb

Trustix Secure Linux 2.2

• Trustix ldapclients-common-183-1tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix pam_ldap-183-1tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-5.2.0-1tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-cli-5.2.0-1tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-curl-5.2.0-1tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-devel-5.2.0-1tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-exif-5.2.0-1tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-fcgi-5.2.0-1tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-gd-5.2.0-1tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-imap-5.2.0-1tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-ldap-5.2.0-1tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-mcrypt-5.2.0-1tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-mhash-5.2.0-1tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-mysql-5.2.0-1tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-openssl-5.2.0-1tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-pdo-mysql-5.2.0-1tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-pdo-sqlite-5.2.0-1tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-pgsql-5.2.0-1tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-sqlite-5.2.0-1tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-zlib-5.2.0-1tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates

Trustix Secure Linux 3.0

• Trustix ldapclients-common-183-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix mutt-1.4.2.1-10tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix pam_ldap-183-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-5.2.0-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-calendar-5.2.0-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-cli-5.2.0-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-curl-5.2.0-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-dba-5.2.0-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-devel-5.2.0-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-exif-5.2.0-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-fcgi-5.2.0-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-gd-5.2.0-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-imap-5.2.0-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-imap-5.2.0-1tr.i586.rpmphp-imap-5.2.0-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-ldap-5.2.0-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-mcrypt-5.2.0-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-mhash-5.2.0-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-mysql-5.2.0-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-mysqli-5.2.0-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-openssl-5.2.0-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-pdo-mysql-5.2.0-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-pdo-sqlite-5.2.0-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-pgsql-5.2.0-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-pspell-5.2.0-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-snmp-5.2.0-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-sqlite-5.2.0-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-xslt-5.2.0-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-zlib-5.2.0-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates