The auth_send function in providers/ldap/ldap_auth.c in System Security Services Daemon (SSSD) 1.3.0, when LDAP authentication and anonymous bind are enabled, allows remote attackers to bypass the authentication requirements of pam_authenticate via an empty password.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The auth_send function in providers/ldap/ldap_auth.c in System Security Services Daemon (SSSD) 1.3.0, when     LDAP authentication and anonymous bind are enabled, allows remote attackers to bypass the authentication     requirements of pam_authenticate via an empty password. (CVE-2010-2940)

Note that Nessus relies on the presence of the package as reported by the vendor.

- CVE-2010-2940 - SSSD allows null password entry to     authenticate against LDAP

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Type	Severity
217270	Linux Distros Unpatched Vulnerability : CVE-2010-2940	Nessus	Misc.	Local	critical
49095	Fedora 12 : sssd-1.2.2-20.fc12 (2010-13557)	Nessus	Fedora Local Security Checks	Local	medium
49094	Fedora 13 : sssd-1.2.2-21.fc13 (2010-13549)	Nessus	Fedora Local Security Checks	Local	medium
49075	Fedora 14 : sssd-1.3.0-30.fc14 (2010-13474)	Nessus	Fedora Local Security Checks	Local	medium

Detections

Analytics

CVE-2010-2940

critical

Tenable Plugins

critical

medium

medium

medium