Security Advisory
CVE-2011-0438
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
nslcd/pam.c in the nss-pam-ldapd 0.8.0 PAM module returns a success code when a user is not found in LDAP, which allows remote attackers to bypass authentication.