CVE-2009-3232

Опубликовано: 17 сент. 2009

Источник: nvd

CVSS2: 9.3

EPSS Низкий

Описание

pam-auth-update for PAM, as used in Ubuntu 8.10 and 9.4, and Debian GNU/Linux, does not properly handle an "empty selection" for system authentication modules in certain rare configurations, which causes any attempt to be successful and allows remote attackers to bypass authentication.

Ссылки

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=519927
Issue Tracking
Mailing List
http://secunia.com/advisories/36620
Broken Link
Vendor Advisory
http://www.openwall.com/lists/oss-security/2009/09/08/7
Mailing List
http://www.securityfocus.com/bid/36306
Broken Link
Patch
Third Party Advisory
VDB Entry
https://launchpad.net/bugs/410171
Issue Tracking
Patch
https://usn.ubuntu.com/828-1/
Broken Link
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=519927
Issue Tracking
Mailing List
http://secunia.com/advisories/36620
Broken Link
Vendor Advisory
http://www.openwall.com/lists/oss-security/2009/09/08/7
Mailing List
http://www.securityfocus.com/bid/36306
Broken Link
Patch
Third Party Advisory
VDB Entry
https://launchpad.net/bugs/410171
Issue Tracking
Patch
https://usn.ubuntu.com/828-1/
Broken Link

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*

EPSS

Процентиль: 67%

0.00539

Низкий

9.3 Critical

CVSS2

Дефекты

CWE-287

Связанные уязвимости

CVE-2009-3232

ubuntu

больше 16 лет назад

CVE-2009-3232

debian

больше 16 лет назад

pam-auth-update for PAM, as used in Ubuntu 8.10 and 9.4, and Debian GN ...

GHSA-6jvj-39c6-mh4m

github

больше 3 лет назад

EPSS

Процентиль: 67%

0.00539

Низкий

9.3 Critical

CVSS2

Дефекты

CWE-287