31 matches found
DEBIAN-CVE-2026-104033
A flaw was found in SSSD. When configured to enforce account expiration using LDAP Lightweight Directory Access Protocol shadow attributes, SSSD fails to treat an expiration value of zero as an expired account. A user with valid credentials for an expired account can exploit this flaw to bypass...
UBUNTU-CVE-2026-104033
A flaw was found in SSSD. When configured to enforce account expiration using LDAP Lightweight Directory Access Protocol shadow attributes, SSSD fails to treat an expiration value of zero as an expired account. A user with valid credentials for an expired account can exploit this flaw to bypass...
CVE-2026-104033
A vulnerability exists in SSSD where the software fails to correctly treat an LDAP shadow expiration value of zero as an expired account. When configured to enforce account expiration via LDAP, this access control bypass allows a user with valid credentials for a deactivated account to authentica...
EUVD-2026-92890
A flaw was found in SSSD. When configured to enforce account expiration using LDAP Lightweight Directory Access Protocol shadow attributes, SSSD fails to treat an expiration value of zero as an expired account. A user with valid credentials for an expired account can exploit this flaw to bypass...
CVE-2026-104033
A flaw was found in SSSD. When configured to enforce account expiration using LDAP Lightweight Directory Access Protocol shadow attributes, SSSD fails to treat an expiration value of zero as an expired account. A user with valid credentials for an expired account can exploit this flaw to bypass...
CVE-2026-104033
A flaw was found in SSSD. When configured to enforce account expiration using LDAP Lightweight Directory Access Protocol shadow attributes, SSSD fails to treat an expiration value of zero as an expired account. A user with valid credentials for an expired account can exploit this flaw to bypass...
CVE-2026-104033
A flaw was found in SSSD. When configured to enforce account expiration using LDAP Lightweight Directory Access Protocol shadow attributes, SSSD fails to treat an expiration value of zero as an expired account. A user with valid credentials for an expired account can exploit this flaw to bypass...
Linux Distros Unpatched Vulnerability : CVE-2026-104033
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in SSSD. When configured to enforce account expiration using LDAP Lightweight Directory Access Protocol shadow attributes, SSSD fails to treat ...
PT-2026-106285
A flaw was found in SSSD. When configured to enforce account expiration using LDAP Lightweight Directory Access Protocol shadow attributes, SSSD fails to treat an expiration value of zero as an expired account. A user with valid credentials for an expired account can exploit this flaw to bypass...
EUVD-1999-1004
Malware in sbrugna...
SUSE CVE-2004-0041
The modauthshadow module 1.4 and earlier does not properly enforce the expiration of a user account and password, which could allow remote authenticated users to bypass intended access restrictions...
Maddy Mail Server 安全漏洞
Maddy Mail Server is a composable all-in-one mail server from the Russian individual developer Max Mazurov. A security vulnerability exists in maddy Mail Server versions prior to 0.5.4, which stems from not implementing password expiration or account expiration checks when using PAM for...
CVE-2021-21502
Dell PowerScale OneFS versions 8.1.0 – 9.1.0 contain a "use of SSH key past account expiration" vulnerability. A user on the network with the ISIPRIVAUTHSSH RBAC privilege that has an expired account may potentially exploit this vulnerability, giving them access to the same things they had before...
Code injection
Dell PowerScale OneFS versions 8.1.0 – 9.1.0 contain a "use of SSH key past account expiration" vulnerability. A user on the network with the ISIPRIVAUTHSSH RBAC privilege that has an expired account may potentially exploit this vulnerability, giving them access to the same things they had before...
CVE-2021-21502
Dell PowerScale OneFS versions 8.1.0 – 9.1.0 contain a "use of SSH key past account expiration" vulnerability. A user on the network with the ISIPRIVAUTHSSH RBAC privilege that has an expired account may potentially exploit this vulnerability, giving them access to the same things they had before...
CVE-2021-21502
Affected products: Dell PowerScale OneFS 8.1.0–9.1.0. Vulnerability: use of an SSH key past account expiration tied to the ISI_PRIV_AUTH_SSH RBAC privilege, enabling a user with an expired account to access the same content as before expiration. Impact (per sources): potential access with high im...
CVE-2021-21502: Improper Authentication
Dell PowerScale OneFS versions 8.1.0 – 9.1.0 contain a "use of SSH key past account expiration" vulnerability. A user on the network with the ISIPRIVAUTHSSH RBAC privilege that has an expired account may potentially exploit this vulnerability, giving them access to the same things they had before...
openGauss: Configuring the Validity Period of User Roles
When creating a role, you can use the keyword VALID BEGIN to set the start time of the role validity period and use VALID UNTIL to set the end time. If these two keywords are not set, roles are permanently valid. The role expiration time on each node in openGauss depends on the OS clock on each...
IceWarp Merak Mail Server 9.4.1 'Forgot Password' Input Validation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/34827/info IceWarp Merak Mail Server is prone to an input-validation vulnerability because it uses client-supplied data when performing a 'Forgot Password' function. Attackers can exploit this issue via social-engineering...
Bs General_Classifieds Script SQL Injection
1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Bs GeneralClassifieds Script Sqli Vulnerability Date : july 5,2010 Critical Level : HIGH vendor URL :http://www.brotherscripts.com/ Price:$24.95 Author :...