PT-2009-3225 · Linux · Linux-Pam

Vincent Danen · Publicado 2009-04-16 · Atualizado 2019-01-03 · CVE-2009-0579

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Linux-PAM versions prior to 1.0.4

Description The issue allows local users to bypass intended security policy by changing their passwords sooner than specified, due to the failure to enforce the minimum password age (MINDAYS) as specified in /etc/shadow.

Recommendations For versions prior to 1.0.4, update to version 1.0.4 or later to enforce the minimum password age as specified in /etc/shadow.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2009-0579

Produtos afetados

Linux-Pam

Referências · 11

• https://osv.dev/vulnerability/DEBIAN-CVE-2009-0579 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2009-0579 · Aviso do Fabricante
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=514437 · Nota
• https://osv.dev/vulnerability/CVE-2009-0579 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=487216 · Correção
• http://secunia.com/advisories/34733 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-0579 · Nota de Segurança
• https://redhat.com/archives/fedora-package-announce/2009-April/msg00420.html · Aviso do Fabricante
• https://redhat.com/archives/fedora-package-announce/2009-April/msg00398.html · Aviso do Fabricante
• https://redhat.com/archives/pam-list/2009-March/msg00006.html · Aviso do Fabricante
• http://secunia.com/advisories/34728 · Aviso do Fabricante