Every CVE Search/ Get API key

CVE-2005-2069

pam_ldap and nss_ldap, when used with OpenLDAP and connecting to a slave using TLS, does not use...

5.0 MediumFix available

pam_ldap and nss_ldap, when used with OpenLDAP and connecting to a slave using TLS, does not use TLS for the subsequent connection if the client is referred to a master, which may cause a password to be sent in cleartext and allows remote attackers to sniff the password.

Exploit likelihood

2.75%Down 1.6 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

pam_ldap and nss_ldap, when used with OpenLDAP and connecting to a slave using TLS, does not use TLS for the subsequent connection if the client is referred to a master, which may cause a password to be sent in cleartext and allows remote attackers to sniff the password.

Record
CVE-2005-2069
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness
CWE-319
Updated
2026-11-02
CVE List No score

pam_ldap and nss_ldap, when used with OpenLDAP and connecting to a slave using TLS, does not use TLS for the subsequent connection if the client is referred to a master, which may cause a password to be sent in cleartext and allows remote attackers to sniff the password.

Record
CVE-2005-2069
Updated
2026-11-02
EUVDEUVD-2005-2071 No score

pam_ldap and nss_ldap, when used with OpenLDAP and connecting to a slave using TLS, does not use TLS for the subsequent connection if the client is referred to a master, which may cause a password to be sent in cleartext and allows remote attackers to sniff the password.

Record
EUVD-2005-2071
Updated
2026-11-03
GitHub AdvisoriesGHSA-fv7v-76vm-38q4 No score

pam_ldap and nss_ldap, when used with OpenLDAP and connecting to a slave using TLS, does not use...

pam_ldap and nss_ldap, when used with OpenLDAP and connecting to a slave using TLS, does not use TLS for the subsequent connection if the client is referred to a master, which may cause a password to be sent in cleartext and allows remote attackers to sniff the password.

Record
GHSA-fv7v-76vm-38q4
Weakness
CWE-319
Updated
2026-11-02
OSV No score

pam_ldap and nss_ldap, when used with OpenLDAP and connecting to a slave using TLS, does not use TLS for the subsequent connection if the client is referred to a master, which may cause a password to be sent in cleartext and allows remote attackers to sniff the password.

Record
CVE-2005-2069
Updated
2026-11-02
OSVDEBIAN-CVE-2005-2069 No score

pam_ldap and nss_ldap, when used with OpenLDAP and connecting to a slave using TLS, does not use TLS for the subsequent connection if the client is referred to a master, which may cause a password to be sent in cleartext and allows remote attackers to sniff the password.

Record
DEBIAN-CVE-2005-2069
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libnss-ldap
Debian:11
 before 238-1.1
238-1.1
libpam-ldap
Debian:11
 before 178-1sarge1
178-1sarge1
libpam-ldap
Debian:3.1
From an advisory covering 2 CVEs
 before 178-1sarge1, plus listed versions
178-1
178-1sarge1
nss_ldap
Red Hat:enterprise_linux:3::as
From an advisory covering 2 CVEs
 before 0:207-17
0:207-17
nss_ldap-debuginfo
Red Hat:enterprise_linux:3::as
From an advisory covering 2 CVEs
 before 0:207-17
0:207-17
openldap
Red Hat:enterprise_linux:3::as
From an advisory covering 2 CVEs
 before 0:2.0.27-20
0:2.0.27-20
openldap-clients
Red Hat:enterprise_linux:3::as
From an advisory covering 2 CVEs
 before 0:2.0.27-20
0:2.0.27-20
openldap-debuginfo
Red Hat:enterprise_linux:3::as
From an advisory covering 2 CVEs
 before 0:2.0.27-20
0:2.0.27-20
openldap-devel
Red Hat:enterprise_linux:3::as
From an advisory covering 2 CVEs
 before 0:2.0.27-20
0:2.0.27-20
openldap-servers
Red Hat:enterprise_linux:3::as
From an advisory covering 2 CVEs
 before 0:2.0.27-20
0:2.0.27-20
Show 55 moreShow less
Affected packages
PackageAffectedFixed
nss_ldap
Red Hat:enterprise_linux:3::desktop
From an advisory covering 2 CVEs
 before 0:207-17
0:207-17
nss_ldap-debuginfo
Red Hat:enterprise_linux:3::desktop
From an advisory covering 2 CVEs
 before 0:207-17
0:207-17
openldap
Red Hat:enterprise_linux:3::desktop
From an advisory covering 2 CVEs
 before 0:2.0.27-20
0:2.0.27-20
openldap-clients
Red Hat:enterprise_linux:3::desktop
From an advisory covering 2 CVEs
 before 0:2.0.27-20
0:2.0.27-20
openldap-debuginfo
Red Hat:enterprise_linux:3::desktop
From an advisory covering 2 CVEs
 before 0:2.0.27-20
0:2.0.27-20
openldap-devel
Red Hat:enterprise_linux:3::desktop
From an advisory covering 2 CVEs
 before 0:2.0.27-20
0:2.0.27-20
nss_ldap
Red Hat:enterprise_linux:3::es
From an advisory covering 2 CVEs
 before 0:207-17
0:207-17
nss_ldap-debuginfo
Red Hat:enterprise_linux:3::es
From an advisory covering 2 CVEs
 before 0:207-17
0:207-17
openldap
Red Hat:enterprise_linux:3::es
From an advisory covering 2 CVEs
 before 0:2.0.27-20
0:2.0.27-20
openldap-clients
Red Hat:enterprise_linux:3::es
From an advisory covering 2 CVEs
 before 0:2.0.27-20
0:2.0.27-20
openldap-debuginfo
Red Hat:enterprise_linux:3::es
From an advisory covering 2 CVEs
 before 0:2.0.27-20
0:2.0.27-20
openldap-devel
Red Hat:enterprise_linux:3::es
From an advisory covering 2 CVEs
 before 0:2.0.27-20
0:2.0.27-20
openldap-servers
Red Hat:enterprise_linux:3::es
From an advisory covering 2 CVEs
 before 0:2.0.27-20
0:2.0.27-20
nss_ldap
Red Hat:enterprise_linux:3::ws
From an advisory covering 2 CVEs
 before 0:207-17
0:207-17
nss_ldap-debuginfo
Red Hat:enterprise_linux:3::ws
From an advisory covering 2 CVEs
 before 0:207-17
0:207-17
openldap
Red Hat:enterprise_linux:3::ws
From an advisory covering 2 CVEs
 before 0:2.0.27-20
0:2.0.27-20
openldap-clients
Red Hat:enterprise_linux:3::ws
From an advisory covering 2 CVEs
 before 0:2.0.27-20
0:2.0.27-20
openldap-debuginfo
Red Hat:enterprise_linux:3::ws
From an advisory covering 2 CVEs
 before 0:2.0.27-20
0:2.0.27-20
openldap-devel
Red Hat:enterprise_linux:3::ws
From an advisory covering 2 CVEs
 before 0:2.0.27-20
0:2.0.27-20
compat-openldap
Red Hat:enterprise_linux:4::as
From an advisory covering 2 CVEs
 before 0:2.1.30-4
0:2.1.30-4
nss_ldap
Red Hat:enterprise_linux:4::as
From an advisory covering 2 CVEs
 before 0:226-10
0:226-10
nss_ldap-debuginfo
Red Hat:enterprise_linux:4::as
From an advisory covering 2 CVEs
 before 0:226-10
0:226-10
openldap
Red Hat:enterprise_linux:4::as
From an advisory covering 2 CVEs
 before 0:2.2.13-4
0:2.2.13-4
openldap-clients
Red Hat:enterprise_linux:4::as
From an advisory covering 2 CVEs
 before 0:2.2.13-4
0:2.2.13-4
openldap-debuginfo
Red Hat:enterprise_linux:4::as
From an advisory covering 2 CVEs
 before 0:2.2.13-4
0:2.2.13-4
openldap-devel
Red Hat:enterprise_linux:4::as
From an advisory covering 2 CVEs
 before 0:2.2.13-4
0:2.2.13-4
openldap-servers
Red Hat:enterprise_linux:4::as
From an advisory covering 2 CVEs
 before 0:2.2.13-4
0:2.2.13-4
openldap-servers-sql
Red Hat:enterprise_linux:4::as
From an advisory covering 2 CVEs
 before 0:2.2.13-4
0:2.2.13-4
compat-openldap
Red Hat:enterprise_linux:4::desktop
From an advisory covering 2 CVEs
 before 0:2.1.30-4
0:2.1.30-4
nss_ldap
Red Hat:enterprise_linux:4::desktop
From an advisory covering 2 CVEs
 before 0:226-10
0:226-10
nss_ldap-debuginfo
Red Hat:enterprise_linux:4::desktop
From an advisory covering 2 CVEs
 before 0:226-10
0:226-10
openldap
Red Hat:enterprise_linux:4::desktop
From an advisory covering 2 CVEs
 before 0:2.2.13-4
0:2.2.13-4
openldap-clients
Red Hat:enterprise_linux:4::desktop
From an advisory covering 2 CVEs
 before 0:2.2.13-4
0:2.2.13-4
openldap-debuginfo
Red Hat:enterprise_linux:4::desktop
From an advisory covering 2 CVEs
 before 0:2.2.13-4
0:2.2.13-4
openldap-devel
Red Hat:enterprise_linux:4::desktop
From an advisory covering 2 CVEs
 before 0:2.2.13-4
0:2.2.13-4
openldap-servers
Red Hat:enterprise_linux:4::desktop
From an advisory covering 2 CVEs
 before 0:2.2.13-4
0:2.2.13-4
openldap-servers-sql
Red Hat:enterprise_linux:4::desktop
From an advisory covering 2 CVEs
 before 0:2.2.13-4
0:2.2.13-4
compat-openldap
Red Hat:enterprise_linux:4::es
From an advisory covering 2 CVEs
 before 0:2.1.30-4
0:2.1.30-4
nss_ldap
Red Hat:enterprise_linux:4::es
From an advisory covering 2 CVEs
 before 0:226-10
0:226-10
nss_ldap-debuginfo
Red Hat:enterprise_linux:4::es
From an advisory covering 2 CVEs
 before 0:226-10
0:226-10
openldap
Red Hat:enterprise_linux:4::es
From an advisory covering 2 CVEs
 before 0:2.2.13-4
0:2.2.13-4
openldap-clients
Red Hat:enterprise_linux:4::es
From an advisory covering 2 CVEs
 before 0:2.2.13-4
0:2.2.13-4
openldap-debuginfo
Red Hat:enterprise_linux:4::es
From an advisory covering 2 CVEs
 before 0:2.2.13-4
0:2.2.13-4
openldap-devel
Red Hat:enterprise_linux:4::es
From an advisory covering 2 CVEs
 before 0:2.2.13-4
0:2.2.13-4
openldap-servers
Red Hat:enterprise_linux:4::es
From an advisory covering 2 CVEs
 before 0:2.2.13-4
0:2.2.13-4
openldap-servers-sql
Red Hat:enterprise_linux:4::es
From an advisory covering 2 CVEs
 before 0:2.2.13-4
0:2.2.13-4
compat-openldap
Red Hat:enterprise_linux:4::ws
From an advisory covering 2 CVEs
 before 0:2.1.30-4
0:2.1.30-4
nss_ldap
Red Hat:enterprise_linux:4::ws
From an advisory covering 2 CVEs
 before 0:226-10
0:226-10
nss_ldap-debuginfo
Red Hat:enterprise_linux:4::ws
From an advisory covering 2 CVEs
 before 0:226-10
0:226-10
openldap
Red Hat:enterprise_linux:4::ws
From an advisory covering 2 CVEs
 before 0:2.2.13-4
0:2.2.13-4
openldap-clients
Red Hat:enterprise_linux:4::ws
From an advisory covering 2 CVEs
 before 0:2.2.13-4
0:2.2.13-4
openldap-debuginfo
Red Hat:enterprise_linux:4::ws
From an advisory covering 2 CVEs
 before 0:2.2.13-4
0:2.2.13-4
openldap-devel
Red Hat:enterprise_linux:4::ws
From an advisory covering 2 CVEs
 before 0:2.2.13-4
0:2.2.13-4
openldap-servers
Red Hat:enterprise_linux:4::ws
From an advisory covering 2 CVEs
 before 0:2.2.13-4
0:2.2.13-4
openldap-servers-sql
Red Hat:enterprise_linux:4::ws
From an advisory covering 2 CVEs
 before 0:2.2.13-4
0:2.2.13-4

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2005-2069 is a medium vulnerability (CVSS 5.0) in Padl Nss Ldap, published June 29, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.75%, the 86th percentile. Fixed in libnss-ldap 238-1.1.

References

Show 38 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open