Linux Distros Unpatched Vulnerability : CVE-2016-20014

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In pamtacplus.c in pamtacplus before 1.4.1, pamsmacctmgmt does not zero out the arep data structure. CVE-2016-20014 Note that Nessus relies on the presence of t...

Linux Distros Unpatched Vulnerability : CVE-2020-27743

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libtac in pamtacplus through 1.5.1 lacks a check for a failure of RANDbytes/RANDpseudobytes. This could lead to use of a non-random/predictable sessionid...

UBUNTU-CVE-2016-20014

In pamtacplus.c in pamtacplus before 1.4.1, pamsmacctmgmt does not zero out the arep data structure...

PT-2022-7849

Name of the Vulnerable Software and Affected Versions pam tacplus versions prior to 1.4.1 Description The issue arises from the pam sm acct mgmt function in pam tacplus.c not properly zeroing out the arep data structure. This could potentially lead to sensitive information disclosure...

PT-2020-16796

Name of the Vulnerable Software and Affected Versions pam tacplus versions through 1.5.1 Description The issue is related to a lack of check for a failure of RAND bytes/RAND pseudo bytes in libtac, which could lead to the use of a non-random or predictable session id. Recommendations For versions...

USN-4521-1 libpam-tacplus vulnerability

It was discovered that pamtacplus did not properly manage shared secrets if DEBUG loglevel and journald are used. A remote attacker could use this issue to expose sensitive information...

UBUNTU-CVE-2020-13881

In support.c in pamtacplus 1.3.8 through 1.5.1, the TACACS+ shared secret gets logged via syslog if the DEBUG loglevel and journald are used...

PT-2020-13746

Name of the Vulnerable Software and Affected Versions pam tacplus versions 1.3.8 through 1.5.1 Description The issue concerns the logging of the TACACS+ shared secret via syslog when the DEBUG loglevel and journald are used. This occurs in the support.c file of pam tacplus. Recommendations For pa...