Description (CNA)
The LDAP name service (nsd) in IRIX 6.5.19 and earlier does not properly verify if the USERPASSWORD attribute has been provided by an LDAP server, which could allow attackers to log in without a password.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.securityfocus.com/bid/7442
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11860
- http://www.ciac.org/ciac/bulletins/n-084.shtml
ADP enrichment
No English description supplied.