Back to search
CVE-2005-2977
Published: Nov 1, 2005
Modified: Aug 7, 2024
PUBLISHED
Description
The SELinux version of PAM before 0.78 r3 allows local users to perform brute force password guessing attacks via unix_chkpwd, which does not log failed guesses or delay its responses.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
17346
third-party-advisory
x_refsource_SECUNIA
RHSA-2005:805
vendor-advisory
x_refsource_REDHAT
17352
third-party-advisory
x_refsource_SECUNIA
ADV-2005-2227
vdb-entry
x_refsource_VUPEN
1015111
vdb-entry
x_refsource_SECTRACK
oval:org.mitre.oval:def:10193
vdb-entry
signature
x_refsource_OVAL
http://cvs.sourceforge.net/viewcvs.py/pam/Linux-PAM/NEWS?rev=1.6&view=markup
x_refsource_CONFIRM
17350
third-party-advisory
x_refsource_SECUNIA
17365
third-party-advisory
x_refsource_SECUNIA
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=168181
x_refsource_MISC
15217
vdb-entry
x_refsource_BID
GLSA-200510-22
vendor-advisory
x_refsource_GENTOO
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now