26 matches found
CVE-2013-7041
The pamuserdb module for Pam uses a case-insensitive method to compare hashed passwords, which makes it easier for attackers to guess the password via a brute force attack...
CVE-2013-7041
The pamuserdb module for Pam uses a case-insensitive method to compare hashed passwords, which makes it easier for attackers to guess the password via a brute force attack...
Design/Logic Flaw
The pamuserdb module for Pam uses a case-insensitive method to compare hashed passwords, which makes it easier for attackers to guess the password via a brute force attack...
CVE-2013-7041
CVE-2013-7041 affects the Linux-PAM pam_userdb module, where a flaw in the password hash comparison (notably using case-insensitive comparison via strncasecmp) can enable brute-force credential guessing. Reported across multiple vendors (IBM FSM, Red Hat, SUSE, Debian/Ubuntu advisories) with low-...
