CVE-2009-0579

Linux-PAM before 1.0.4 does not enforce the minimum password age MINDAYS as specified in /etc/shadow, which allows local users to bypass intended security policy and change their passwords sooner than specified...

CVE-2009-0579

Linux-PAM before 1.0.4 does not enforce the minimum password age MINDAYS as specified in /etc/shadow, which allows local users to bypass intended security policy and change their passwords sooner than specified...

CVE-2009-0579: Undefined Security Weakness

Linux-PAM before 1.0.4 does not enforce the minimum password age MINDAYS as specified in /etc/shadow, which allows local users to bypass intended security policy and change their passwords sooner than specified...

Mandrake Security Advisory MDVSA-2009:077 (pam)

The remote host is missing an update to pam announced via advisory MDVSA-2009:077. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...

Linux-PAM signed/unsignedconversion vulnerability

Problems with non-ASCII symbols in configuration file...

CVE-2009-0887

Integer signedness error in the pamStrTok function in libpam/pammisc.c in Linux-PAM aka pam 1.0.3 and earlier, when a configuration file contains non-ASCII usernames, might allow remote attackers to cause a denial of service, and might allow remote authenticated users to obtain login access with ...

CVE-2009-0887

Integer signedness error in the pamStrTok function in libpam/pammisc.c in Linux-PAM aka pam 1.0.3 and earlier, when a configuration file contains non-ASCII usernames, might allow remote attackers to cause a denial of service, and might allow remote authenticated users to obtain login access with ...

Integer overflow

Integer signedness error in the pamStrTok function in libpam/pammisc.c in Linux-PAM aka pam 1.0.3 and earlier, when a configuration file contains non-ASCII usernames, might allow remote attackers to cause a denial of service, and might allow remote authenticated users to obtain login access with ...

CVE-2009-0887

CVE-2009-0887 describes an integer signedness error in the pam_StrTok function (libpam/pam_misc.c) of Linux-PAM up to version 1.0.3 and earlier. The issue can surface when a configuration file contains non-ASCII usernames, potentially leading to a denial of service and, in some cases, allowing re...

CVE-2009-0887

Integer signedness error in the pamStrTok function in libpam/pammisc.c in Linux-PAM aka pam 1.0.3 and earlier, when a configuration file contains non-ASCII usernames, might allow remote attackers to cause a denial of service, and might allow remote authenticated users to obtain login access with ...

CVE-2009-0887

Integer signedness error in the pamStrTok function in libpam/pammisc.c in Linux-PAM aka pam 1.0.3 and earlier, when a configuration file contains non-ASCII usernames, might allow remote attackers to cause a denial of service, and might allow remote authenticated users to obtain login access with ...

CVE-2009-0887

Integer signedness error in the pamStrTok function in libpam/pammisc.c in Linux-PAM aka pam 1.0.3 and earlier, when a configuration file contains non-ASCII usernames, might allow remote attackers to cause a denial of service, and might allow remote authenticated users to obtain login access with ...

CVE-2009-0887: Undefined Security Weakness

Integer signedness error in the pamStrTok function in libpam/pammisc.c in Linux-PAM aka pam 1.0.3 and earlier, when a configuration file contains non-ASCII usernames, might allow remote attackers to cause a denial of service, and might allow remote authenticated users to obtain login access with ...

[SECURITY] Fedora 9 Update: pam_krb5-2.3.0-2.fc9

This is pamkrb5, a pluggable authentication module that can be used with Linux-PAM and Kerberos 5. This module supports password checking, ticket creation, and optional TGT verification and conversion to Kerberos IV ticke ts. The included pamkrb5afs module also gets AFS tokens if so configured...

Linux-PAM pam_unix.so绕过认证漏洞

可插拔认证模块（PAM）是用于认证用户的机制，使用在多种Linux版本上。 Linux-PAM的modules/pamunix/support.c文件中unixverifypassword函数在验证用户口令时存在漏洞，远程攻击者可能利用此漏洞获取非授权访问。 如果口令文件中的哈希为“!!”或类似的话，用户就可以以任意口令登录。 Linux-PAM Linux-PAM 0.99.7.0 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

[SA23858] Linux-PAM Login Bypass Security Vulnerability

TITLE: Linux-PAM Login Bypass Security Vulnerability SECUNIA ADVISORY ID: SA23858 VERIFY ADVISORY: http://secunia.com/advisories/23858/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: Linux-PAM 0.x http://secunia.com/product/1701/ DESCRIPTION: A vulnerability ha...

Code injection

pamunix.so in Linux-PAM 0.99.7.0 allows context-dependent attackers to log into accounts whose password hash, as stored in /etc/passwd or /etc/shadow, has only two characters...

CVE-2007-0003

pamunix.so in Linux-PAM 0.99.7.0 allows context-dependent attackers to log into accounts whose password hash, as stored in /etc/passwd or /etc/shadow, has only two characters...

CVE-2007-0003

pamunix.so in Linux-PAM 0.99.7.0 allows context-dependent attackers to log into accounts whose password hash, as stored in /etc/passwd or /etc/shadow, has only two characters...

CVE-2007-0003

pamunix.so in Linux-PAM 0.99.7.0 allows context-dependent attackers to log into accounts whose password hash, as stored in /etc/passwd or /etc/shadow, has only two characters...