CVE-2009-3232

Publicada em 17 set 2009 · Atualizada em 07 ago 2024

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 4.6%

pam-auth-update for PAM, as used in Ubuntu 8.10 and 9.4, and Debian GNU/Linux, does not properly handle an "empty selection" for system authentication modules in certain rare configurations, which causes any attempt to be successful and allows remote attackers to bypass authentication.

Produtos afetados

n/a · n/a

Referências

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=519927 http://secunia.com/advisories/36620 https://launchpad.net/bugs/410171 https://usn.ubuntu.com/828-1/http://www.openwall.com/lists/oss-security/2009/09/08/7 http://www.securityfocus.com/bid/36306