PT-2004-3289 · Passwd · Passwd

Steve Grubb · Publicado 2004-12-31 · Atualizado 2017-07-11 · CVE-2004-2396

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: passwd version 0.68

Description: The issue is related to the pam start function, where the return code is not checked, potentially preventing safe and proper operation of PAM. The impact and attack vectors of this issue are unknown.

Recommendations: For passwd version 0.68, consider implementing a check for the return code of the pam start function as a mitigation measure until a patch is available.

Correção

Identificadores relacionados

CVE-2004-2396

Produtos afetados

Passwd

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2004-2396 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16179 · Nota
• http://securityfocus.com/bid/10370 · Correção
• http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=120060 · Aviso do Fabricante
• http://mandriva.com/security/advisories?name=MDKSA-2004:045 · Aviso do Fabricante