CVE-2009-3232 | BDVDB-2026-38542 Detail

Description#

pam-auth-update for PAM, as used in Ubuntu 8.10 and 9.4, and Debian GNU/Linux, does not properly handle an "empty selection" for system authentication modules in certain rare configurations, which causes any attempt to be successful and allows remote attackers to bypass authentication.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=519927
https://launchpad.net/bugs/410171
http://secunia.com/advisories/36620
http://www.openwall.com/lists/oss-security/2009/09/08/7
http://www.securityfocus.com/bid/36306
https://usn.ubuntu.com/828-1/

Exploit#

No public exploit known

History#

Version 12009-09-17Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.