EUVD-2005-0003

Malware in sbrugna...

Gentoo Security Advisory GLSA 200501-22 (poppassd_pam)

The remote host is missing updates announced in advisory GLSA 200501-22. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200501-22 (poppassd_pam)

The remote host is missing updates announced in advisory GLSA 200501-22. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2005-0002

poppassdpam 1.0 and earlier, when changing a user password, does not verify that the user entered the old password correctly, which allows remote attackers to change passwords for arbitrary users...

GLSA-200501-22 : poppassd_pam: Unauthorized password changing

The remote host is affected by the vulnerability described in GLSA-200501-22 poppassdpam: Unauthorized password changing Gentoo Linux developer Marcus Hanwell discovered that poppassdpam did not check that the old password was valid before changing passwords. Our investigation revealed that...

CVE-2005-0002

The CVE-2005-0002 entry concerns poppassd_pam (versions 1.0 and earlier) where, when changing a user password, the old password is not verified correctly. The root cause is that poppassd_pam did not call pam_authenticate before pam_chauthtok, allowing a remote attacker to change passwords for arb...

CVE-2005-0002

poppassdpam 1.0 and earlier, when changing a user password, does not verify that the user entered the old password correctly, which allows remote attackers to change passwords for arbitrary users...

poppassd_pam unauthorized password change

Old password is never checked before setting new one...

[ GLSA 200501-22 ] poppassd_pam: Unauthorized password changing

Gentoo Linux Security Advisory GLSA 200501-22 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

poppassd_pam: Unauthorized password changing

Background poppassdpam is a PAM-enabled server for changing system passwords that can be used to change POP server passwords. Description Gentoo Linux developer Marcus Hanwell discovered that poppassdpam did not check that the old password was valid before changing passwords. Our investigation...