security flaw
Published Aug 21, 2005
7.5
HIGHCVSS 2.0
EPSS 3.65%
Description
Unknown vulnerability in pam_ldap before 180 does not properly handle a new password policy control, which could allow attackers to gain privileges. NOTE: CVE-2005-2497 had also been assigned to this issue, but CVE-2005-2641 is the correct candidate.
Affected products
No data.
- ≤ build_178
No data.
Red Hat Enterprise Linux 4
nss_ldap-0:226-10
Fixed · RHSA-2005:767
Red Hat Enterprise Linux 4
openldap-0:2.2.13-4
Fixed · RHSA-2005:767
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 4 | nss_ldap-0:226-10 | Fixed | RHSA-2005:767 |
| Red Hat Enterprise Linux 4 | openldap-0:2.2.13-4 | Fixed | RHSA-2005:767 |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Metrics
No CVSS v4.0 score for this CVE.
No CVSS v3.1 score for this CVE.
No CVSS v3.0 score for this CVE.
AV:N/AC:L/Au:N/C:P/I:P/A:P
This CVE is not in the KEV list.
No CISA SSVC assessment for this CVE yet.
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.
Score over time
2022–2026- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Percentile over time
- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Table of values (9 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 1, 2026 | 3.65% (0.03645) | 89.22th | v5 (v2026.06.15) |
| Jun 15, 2026 | 3.65% (0.03645) | 88.10th | v5 (v2026.06.15) |
| Mar 17, 2025 | 2.01% (0.02014) | 82.54th | v4 (v2025.03.14) |
| Dec 12, 2024 | 1.76% (0.01764) | 88.49th | v3 (v2023.03.01) |
| Mar 7, 2023 | 2.12% (0.02121) | 87.41th | v3 (v2023.03.01) |
| Mar 6, 2023 | 1.54% (0.01537) | 74.52th | v2 (v2022.01.01) |
| Feb 23, 2023 | 1.54% (0.01537) | 74.48th | v2 (v2022.01.01) |
| Apr 1, 2022 | 1.54% (0.01537) | 72.41th | v2 (v2022.01.01) |
| Feb 4, 2022 | 1.54% (0.01537) | 51.33th | v2 (v2022.01.01) |
No CWE recorded.
References (14)
- http://secunia.com/advisories/17233 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/17270 third-party-advisoryx_refsource_SECUNIA
- http://www.kb.cert.org/vuls/id/778916 third-party-advisoryx_refsource_CERT-VNUS Government Resource
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:190 vendor-advisoryx_refsource_MANDRIVA
- http://www.redhat.com/support/errata/RHSA-2005-767.html vendor-advisoryx_refsource_REDHAT
- http://www.securityfocus.com/archive/1/447859/100/200/threaded mailing-listx_refsource_BUGTRAQ
- http://www.securityfocus.com/bid/14649 vdb-entryx_refsource_BID
- https://access.redhat.com/security/cve/CVE-2005-2641 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1617737 Issue Tracking
- https://issues.rpath.com/browse/RPL-680 x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2005-2641
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10370 vdb-entrysignaturex_refsource_OVAL
- https://www.cve.org/CVERecord?id=CVE-2005-2641
- https://www.redhat.com/archives/fedora-test-list/2005-August/msg00170.html x_refsource_MISC
Change history (0)
No recorded changes yet.