https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2005-2069.htmlhttps://patchthecve.com/cve/CVE-2005-2069.htmlTue, 16 Jun 2026 22:14:10 +0000MEDIUM 5.0: pam_ldap and nss_ldap, when used with OpenLDAP and connecting to a slave using TLS, does not use TLS for the subsequent connection if the client is referred to a master, which may cause a password to be sent in cleartext and allows remote attackers to sniff the password.https://patchthecve.com/cve/CVE-2003-0734.htmlhttps://patchthecve.com/cve/CVE-2003-0734.htmlTue, 16 Jun 2026 22:02:44 +0000HIGH 10.0: Unknown vulnerability in the pam_filter mechanism in pam_ldap before version 162, when LDAP based authentication is being used, allows users to bypass host-based access restrictions and log onto the system.https://patchthecve.com/cve/CVE-2002-0735.htmlhttps://patchthecve.com/cve/CVE-2002-0735.htmlTue, 16 Jun 2026 21:58:02 +0000HIGH 7.5: Format string vulnerability in the logging() function in C-Note Squid LDAP authentication module (squid_auth_LDAP) 2.0.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code by triggering log messages.https://patchthecve.com/cve/CVE-2002-0374.htmlhttps://patchthecve.com/cve/CVE-2002-0374.htmlTue, 16 Jun 2026 21:57:18 +0000HIGH 7.5: Format string vulnerability in the logging function for the pam_ldap PAM LDAP module before version 144 allows attackers to execute arbitrary code via format strings in the configuration file name.