Authentication vulnerabilities in OpenBSD.

We discovered an authentication-bypass vulnerability in OpenBSD's authentication system: this vulnerability is remotely exploitable in smtpd, ldapd, and radiusd, but its real-world impact should be studied on a case-by-case basis. For example, sshd is not exploitable thanks to its defense-in-depth mechanisms.

https://www.openwall.com/lists/oss-security/2019/12/04/5

#security