CVE-2004-2396: High severity Mandrakesoft Mandrake Multi Network Firewall vulnerability
passwd 0.68 does not check the return code for the pamstart function, which has unknown impact and attack vectors that may prevent "safe and proper operation" of PAM.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-2396?
The severity of CVE-2004-2396 is not explicitly defined, but it pertains to unhandled errors in PAM which may lead to improper operation.
How do I fix CVE-2004-2396?
To fix CVE-2004-2396, upgrade to a version of the software that addresses the PAM error handling issue.
Which software versions are affected by CVE-2004-2396?
CVE-2004-2396 affects various versions of Mandrake Linux, including 8.2, 9.0, 9.1, 9.2, and 10.0, as well as Mandrake Multi Network Firewall 8.2.
What is the impact of CVE-2004-2396?
The impact of CVE-2004-2396 includes potential security risks due to the lack of error handling in the PAM library.
Is CVE-2004-2396 a critical vulnerability?
CVE-2004-2396 is not classified as critical, but it could pose significant risks depending on the specific usage of PAM in affected software.