Filter
AND
-Infinity
0
Trending
SUSE PAMPam: libpam: libpam vulnerable to read hashed password
4.7
First published (updated )
SUSE PAMpam_namespace.c in the pam_namespace module in Linux-PAM (aka pam) before 1.1.3 uses the environment…
6.9
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
ubuntu/pampam: pam_namespace misses O_DIRECTORY flag in `protect_dir()` (CVE-2024-22365)
5.5
EPSS
0.04%
First published (updated )
SUSE PAMThe pam_sm_close_session function in pam_xauth.c in the pam_xauth module in Linux-PAM (aka pam) 1.1.…
4.9
First published (updated )
SUSE PAMThe check_acl function in pam_xauth.c in the pam_xauth module in Linux-PAM (aka pam) 1.1.2 and earli…
4.9
First published (updated )
SUSE PAMThe privilege-dropping implementation in the (1) pam_env and (2) pam_mail modules in Linux-PAM (aka …
4.7
First published (updated )
SUSE PAMInteger signedness error in the _pam_StrTok function in libpam/pam_misc.c in Linux-PAM (aka pam) 1.0…
6.6
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SUSE PAMFrom the original report: "If SELinux is enabled, the _unix_run_helper_binary function in Linux-PAM …
First published (updated )
SUSE PAMThe (1) pam_env and (2) pam_mail modules in Linux-PAM (aka pam) before 1.1.2 use root privileges dur…
4.7
First published (updated )
SUSE PAMLinux-PAM before 1.0.4 does not enforce the minimum password age (MINDAYS) as specified in /etc/shad…
4.6
First published (updated )
SUSE PAMThe pam_mail and pam_env modules in Linux-PAM before 1.1.2 did not drop privileges before accessing …
First published (updated )
SUSE PAMTim Brown reported [1] a minor security flaw in pam_xauth where the run_coprocess() function, which …
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.