pam vulnerabilities (Debian)
25 vulnerabilities.
-
pamDebian Linux-PAM pam_userdb Observable Timing Discrepancy in Plaintext Password Comparison 6.9 Medium -
pamDebian Linux-pam: incomplete fix for cve-2025-6020 7.8 High -
pamDebian Linux-pam: linux-pam directory traversal 7.8 High -
pamDebian Pam: improper hostname interpretation in pam_access leads to access control bypass 7.4 High -
pamDebian Pam: libpam: libpam vulnerable to read hashed password 4.7 Medium -
pamDebian linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked... 5.5 Medium -
pamDebian The _unix_run_helper_binary function in the pam_unix module in Linux-PAM (aka pam) before 1.2.1,... 6.5 Medium -
pamDebian The pam_userdb module for Pam uses a case-insensitive method to compare hashed passwords, which... 4.3 Medium -
pamDebian Untrusted search path vulnerability in pam_motd (aka the MOTD module) in libpam-modules before 1... 6.9 Medium -
pamDebian Multiple directory traversal vulnerabilities in pam_timestamp.c in the pam_timestamp module for... 5.8 Medium -
pamDebian The _expand_arg function in the pam_env module (modules/pam_env/pam_env.c) in Linux-PAM (aka pam)... 2.1 Low -
pamDebian Stack-based buffer overflow in the _assemble_line function in modules/pam_env/pam_env.c in Linux... 4.6 Medium -
pamDebian The pam_env module in Linux-PAM (aka pam) 1.1.2 and earlier reads the .pam_environment file in a... 7.2 High -
pamDebian The check_acl function in pam_xauth.c in the pam_xauth module in Linux-PAM (aka pam) 1.1.2 and... 4.9 Medium -
pamDebian The pam_sm_close_session function in pam_xauth.c in the pam_xauth module in Linux-PAM (aka pam) 1... 4.9 Medium -
pamDebian pam_namespace.c in the pam_namespace module in Linux-PAM (aka pam) before 1.1.3 uses the... 6.9 Medium -
pamDebian The (1) pam_env and (2) pam_mail modules in Linux-PAM (aka pam) before 1.1.2 use root privileges... 4.7 Medium -
pamDebian The privilege-dropping implementation in the (1) pam_env and (2) pam_mail modules in Linux-PAM ... 1.9 Low -
pamDebian The privilege-dropping implementation in the (1) pam_env and (2) pam_mail modules in Linux-PAM ... 4.7 Medium -
pamDebian The run_coprocess function in pam_xauth.c in the pam_xauth module in Linux-PAM (aka pam) before 1... 3.3 Low -
pamDebian pam-auth-update for PAM, as used in Ubuntu 8.10 and 9.4, and Debian GNU/Linux, does not properly... 9.3 High -
pamDebian Linux-PAM before 1.0.4 does not enforce the minimum password age (MINDAYS) as specified in /etc... 4.6 Medium -
pamDebian Integer signedness error in the _pam_StrTok function in libpam/pam_misc.c in Linux-PAM (aka pam)... 6.6 Medium -
pamDebian The SELinux version of PAM before 0.78 r3 allows local users to perform brute force password... 2.1 Low -
pamDebian PAM 0.76 treats a disabled password as if it were an empty (null) password, which allows local... 7.5 High