PT-2005-1140 · Poppassd · Poppassd Pam

Marcus Hanwell · Publicado 2005-01-19 · Atualizado 2008-09-10 · CVE-2005-0002

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions poppassd pam versions 1.0 and earlier

Description The issue allows remote attackers to change passwords for arbitrary users because it does not verify that the user entered the old password correctly when changing a user password.

Recommendations For versions 1.0 and earlier, update to a version that includes the fix for this issue to ensure proper verification of old passwords during the password change process.

Correção

Identificadores relacionados

CVE-2005-0002

Produtos afetados

Poppassd Pam

Referências · 4

• http://security.gentoo.org/glsa/glsa-200501-22.xml · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-0002 · Nota de Segurança
• http://securitytracker.com/id?1012840 · Nota
• http://secunia.com/advisories/13865 · Nota