CVE-2004-2396

Опубликовано: 31 дек. 2004

Источник: nvd

CVSS2: 7.2

EPSS Низкий

Описание

passwd 0.68 does not check the return code for the pam_start function, which has unknown impact and attack vectors that may prevent "safe and proper operation" of PAM.

Ссылки

http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=120060
Patch
Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2004:045
Patch
Vendor Advisory
http://www.securityfocus.com/bid/10370
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/16179
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=120060
Patch
Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2004:045
Patch
Vendor Advisory
http://www.securityfocus.com/bid/10370
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/16179

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:mandrakesoft:mandrake_multi_network_firewall:8.2:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:mandrakesoft:mandrake_linux:8.2:*:*:*:*:*:*:*

cpe:2.3:o:mandrakesoft:mandrake_linux:8.2:*:ppc:*:*:*:*:*

cpe:2.3:o:mandrakesoft:mandrake_linux:9.0:*:*:*:*:*:*:*

cpe:2.3:o:mandrakesoft:mandrake_linux:9.1:*:*:*:*:*:*:*

cpe:2.3:o:mandrakesoft:mandrake_linux:9.1:*:ppc:*:*:*:*:*

cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:*:*:*:*:*:*

cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:amd64:*:*:*:*:*

cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*

cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:*:*:*:*:*:*

cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:x86_64:*:*:*:*:*

EPSS

Процентиль: 16%

0.00053

Низкий

7.2 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2004-2396

debian

почти 21 год назад

passwd 0.68 does not check the return code for the pam_start function, ...

GHSA-x4pr-4m4c-qh6r

github

больше 3 лет назад