QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2001-1459

Back to search

CVE-2001-1459

Published: Apr 21, 2005

Modified: Aug 8, 2024

PUBLISHED

Description

OpenSSH 2.9 and earlier does not initiate a Pluggable Authentication Module (PAM) session if commands are executed with no pty, which allows local users to bypass resource limits (rlimits) set in pam.d.

VendorProductVersions

n/a

n/a

affected
n/a

References

2917
vdb-entry
x_refsource_BID
VU#797027
third-party-advisory
x_refsource_CERT-VN
20010619 pam session
mailing-list
x_refsource_BUGTRAQ
openssh-rsh-bypass-pam(6757)
vdb-entry
x_refsource_XF

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now