high7.5
CVE-2002-1227
PAM 0.76 treats a disabled password as if it were an empty (null) password, which allows local and remote attackers to gain privileges as disabled users.
Impact
PAM 0.76 treats a disabled password as if it were an empty (null) password, which allows local and remote attackers to gain privileges as disabled users.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pam | Pam | Version 0.76 |