CVE ID:	CVE-2010-2940
Description:	The auth_send function in providers/ldap/ldap_auth.c in System Security Services Daemon (SSSD) 1.3.0, when LDAP authentication and anonymous bind are enabled, allows remote attackers to bypass the authentication requirements of pam_authenticate via an empty password.
Test IDs:	1.3.6.1.4.1.25623.1.0.862359   1.3.6.1.4.1.25623.1.0.862633   1.3.6.1.4.1.25623.1.0.67930   1.3.6.1.4.1.25623.1.0.67935   1.3.6.1.4.1.25623.1.0.67933
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2010-2940 41159 http://secunia.com/advisories/41159 https://bugzilla.redhat.com/show_bug.cgi?id=625189 https://bugzilla.redhat.com/show_bug.cgi?id=625189 sssd-ldap-security-bypass(61399) https://exchange.xforce.ibmcloud.com/vulnerabilities/61399