Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
NixOS 17.03 and earlier has an unintended default absence of SSL Certificate Validation for LDAP. The users.ldap NixOS module implements user authentication against LDAP servers via a PAM module. It was found that if TLS is enabled to connect to the LDAP server with users.ldap.useTLS, peer verification will be unconditionally disabled in /etc/ldap.conf.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
NixOS 安全漏洞
Vulnerability Description
NixOS是Linux系统的一个发行版本。 NixOS 17.03及之前的版本中存在安全漏洞。远程攻击者可利用该漏洞实施中间人攻击，窃取用户密码散列或明文形式的服务账户证书。
CVSS Information
N/A
Vulnerability Type
N/A