CVE-2007-0844

CVE-2007-0844 affects pam_ssh (pam_ssh.c) where auth_via_key allows remote attackers to bypass authentication when allow_blank_passphrase is disabled. The vulnerability lies in pam_ssh before version 1.92, enabling use of private keys that require a blank passphrase by entering a non-blank passph...

CVE-2007-0844

The authviakey function in pamssh.c in pamssh before 1.92, when the allowblankpassphrase option is disabled, allows remote attackers to bypass authentication restrictions and use private encryption keys requiring a blank passphrase by entering a non-blank passphrase...

CVE-2007-0844

The authviakey function in pamssh.c in pamssh before 1.92, when the allowblankpassphrase option is disabled, allows remote attackers to bypass authentication restrictions and use private encryption keys requiring a blank passphrase by entering a non-blank passphrase...

pam_ssh allow_blank_passphrase protection bypass

The allowblankpassphrase option was defeatable by entering a random but non-blank passphrase...