CVE-2005-2377: nss_ldap 181 to versions before 213, as used in Mandrake Corporate Server and Mandrake 10.0, and other oper...

Security readout for executives and security teams

This is an old denial-of-service issue in nss_ldap, an LDAP name-service component. If LDAP becomes unavailable while affected systems query it, some applications such as crond may crash because SIGPIPE is mishandled. Sources indicate service disruption risk, not data theft or privilege escalation. Exposure is most likely on legacy Unix/Linux systems using nss_ldap before version 213 for LDAP-backed identity lookups, especially old Mandrake deployments. Modern systems are unlikely to be exposed unless they still run the vulnerable component. Treat this as a legacy hygiene issue unless vulnerable LDAP-dependent systems are still in production. Prioritize inventory and upgrade confirmation over emergency response because the sources do not establish active exploitation or high-impact compromise. Mitigation focus: Inventory systems using nss_ldap for name-service LDAP lookups.; Check whether nss_ldap is version 213 or later.; Review the Mandriva advisory for vendor-provided fixes..

Prepared

Jun 29, 2026, 18:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.