← Vulnerability feed

Vulnerability record · CVE-2005-2377 · published 26 July 2005

CVE-2005-2377: Mandrakesoft mandrake linux vulnerability

MMandrakesoft · Mandrake Linux

nss_ldap 181 to versions before 213, as used in Mandrake Corporate Server and Mandrake 10.0, and other operating systems, does not properly handle a SIGPIPE signal when sending a search request to an LDAP directory server, which might allow remote attackers to cause a denial of service (crond and other application crash) if they can cause an LDAP server to become unavailable. NOTE: it is not clear whether this attack scenario is sufficient to include this item in CVE.

5.0 CVSS 2.0 Medium EPSS 2.5% · top 15.8%
5.0CVSS 2.0 base score
2.5%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
6References
16 Jun 2026Last modified by NVD

Description

nss_ldap 181 to versions before 213, as used in Mandrake Corporate Server and Mandrake 10.0, and other operating systems, does not properly handle a SIGPIPE signal when sending a search request to an LDAP directory server, which might allow remote attackers to cause a denial of service (crond and other application crash) if they can cause an LDAP server to become unavailable. NOTE: it is not clear whether this attack scenario is sufficient to include this item in CVE.

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://qa.mandriva.com/show_bug.cgi?id=13271
http://www.mandriva.com/security/advisories?name=MDKSA-2005:121 Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/40501
http://qa.mandriva.com/show_bug.cgi?id=13271
http://www.mandriva.com/security/advisories?name=MDKSA-2005:121 Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/40501

Track CVE-2005-2377 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2005-3625Easy software products cups vulnerabilityXpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of servic…EPSS 3.8%10.0CVE-2004-1187Mplayer vulnerabilityHeap-based buffer overflow in the pnm_get_chunk function for xine 0.99.2, and other packages such as MPlayer that use the same code, allows remote at…EPSS 5.2%10.0CVE-2004-1188Mplayer vulnerabilityThe pnm_get_chunk function in xine 0.99.2 and earlier, and other packages such as MPlayer that use the same code, does not properly verify that the c…EPSS 2.0%10.0CVE-2004-0461Infoblox dns one appliance vulnerabilityThe DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, uses C includ…EPSS 17%10.0CVE-2004-0460ISC DHCP dhcpd logging buffer overflow via hostname optionsISC DHCP 3.0.1rc12 and 3.0.1rc13 contain a buffer overflow in the DHCP daemon's logging capability. Multiple hostname options in DISCOVER, OFFER, REQ…EPSS 45%analysed10.0CVE-2004-0386Mplayer vulnerabilityBuffer overflow in the HTTP parser for MPlayer 1.0pre3 and earlier, 0.90, and 0.91 allows remote attackers to execute arbitrary code via a long Locat…EPSS 27%10.0CVE-2003-0041Mit kerberos ftp client os command injection vulnerabilityKerberos FTP client allows remote FTP sites to execute arbitrary code via a pipe (|) character in a filename that is retrieved by the client.EPSS 3.5%10.0CVE-2001-0388Freebsd vulnerabilitytime server daemon timed allows remote attackers to cause a denial of service via malformed packets.EPSS 2.7%

Source: NIST National Vulnerability Database (record CVE-2005-2377), CISA KEV, FIRST EPSS (scores of 2026-10-05). This page is refreshed as NVD updates the record.