EUVD-2005-2977

Malware in sbrugna...

security flaw

The SELinux version of PAM before 0.78 r3 allows local users to perform brute force password guessing attacks via unixchkpwd, which does not log failed guesses or delay its responses...