CVE-2010-4341

CVE-2010-4341 affects the PAM responder in SSSD (pam_parse_in_data_v2 in src/responder/pam/pamsrv_cmd.c) and can be exploited locally by crafting a packet to cause a denial of service (infinite loop, crash, login prevention) in SSSD 1.5.0, 1.4.x, and 1.3. Connected advisories confirm fixes for th...

CVE-2009-2410

The CVE-2009-2410 issue affects sssd 0.4.1, where the local_handler_callback in server/responder/pam/pam_LOCAL_domain.c mishandles blank-password accounts in the SSSD BE database. This allows context-dependent attackers to obtain access by supplying the account username and an arbitrary password ...