CVE:CVE-2006-5170
CNNVD:CNNVD-200610-104
Red Hat Enterprise Linux 4，Fedora Core 3和较早的版本，以及可能的其他发行版本，其nss_ldap中的pam_ldap在LDAP目录服务器回应PasswordPolicyResponse控制响应时，并不返回出错情况，从而即使在认证失败的情况下，导致pam_authenticate函数返回成功的代码，最初报告此漏洞针对的是xscreensaver。
solution:Upgrade fedoraproject fedora_core to a higher version than core_3.0,and avoid the version (,core_3.0]; Upgrade redhat enterprise_linux to a higher version than 4.0,and avoid the version 4.0; Upgrade redhat enterprise_linux_desktop to a higher version than 4.0,and avoid the version 4.0; Upgrade redhat enterprise_linux_for_ibm_z_systems to a higher version than 4.0_s390,4.0_s390x,and avoid the version 4.0_s390,4.0_s390x; Upgrade redhat enterprise_linux_for_power_big_endian to a higher version than 4.0,and avoid the version 4.0; Upgrade redhat enterprise_linux_server to a higher version than 4.0,and avoid the version 4.0; Upgrade redhat enterprise_linux_workstation to a higher version than 4.0,and avoid the version 4.0; Upgrade debian debian_linux to a higher version than 3.1,and avoid the version 3.1