CVE-2011-0002: Miloslav Trmac Libuser

Medium severity, CVSS 6.4. EPSS: 3.8% chance of exploitation in the next 30 days.

libuser before 0.57 uses a cleartext password value of (1) !! or (2) x for new LDAP user accounts, which makes it easier for remote attackers to obtain access by specifying one of these values.

Affected products

• Miloslav Trmac Libuser: up to and including 0.56.18; version 0.1 only; version 0.2 only; version 0.3 only; version 0.4 only; version 0.5 only; …

Published 2011-01-22. Last modified 2026-06-16.