NetSight
IP …
medium6.0

CVE-2011-4966

modules/rlm_unix/rlm_unix.c in FreeRADIUS before 2.2.0, when unix mode is enabled for user authentication, does not properly check the password expiration in /…

Impact

modules/rlm_unix/rlm_unix.c in FreeRADIUS before 2.2.0, when unix mode is enabled for user authentication, does not properly check the password expiration in /etc/shadow, which allows remote authenticated users to authenticate using an expired password.

Affected products

VendorProductAffected versions
FreeradiusFreeradius
All versions
through 2.2.0
Versions 0.1, 0.2, 0.3, 0.4

Weakness classification

CWE-255

References