Andrew Morgan » Linux Pam : Security Vulnerabilities, CVEs, CVSS score >= 1
pam_unix.so in Linux-PAM 0.99.7.0 allows context-dependent attackers to log into accounts whose password hash, as stored in /etc/passwd or /etc/shadow, has only two characters.
Max CVSS
7.2
EPSS Score
0.07%
Published
2007-01-23
Updated
2017-07-29
pam_wheel in Linux-PAM 0.78, with the trust option enabled and the use_uid option disabled, allows local users to spoof log entries and gain privileges by causing getlogin() to return a spoofed user name.
Max CVSS
4.6
EPSS Score
0.04%
Published
2003-07-24
Updated
2016-10-18
2 vulnerabilities found