Vulnerabilities (CVE)

Filtered by vendor Pam Subscribe
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2005-2977 1 Pam 1 Pam 2023-12-10 2.1 LOW N/A
The SELinux version of PAM before 0.78 r3 allows local users to perform brute force password guessing attacks via unix_chkpwd, which does not log failed guesses or delay its responses.
CVE-1999-0342 1 Pam 1 Pam 2023-12-10 6.2 MEDIUM N/A
Linux PAM modules allow local users to gain root access using temporary files.
CVE-2002-1227 1 Pam 1 Pam 2023-12-10 7.5 HIGH N/A
PAM 0.76 treats a disabled password as if it were an empty (null) password, which allows local and remote attackers to gain privileges as disabled users.