CVE

Id
14738  
CVE No.
CVE-2005-3532  
Status
Candidate  
Description
authpam.c in courier-authdaemon for Courier Mail Server 0.37.3 through 0.52.1, when using pam_tally, does not call the pam_acct_mgmt function to verify that access should be granted, which allows attackers to authenticate to the server using accounts that have been disabled.  
Phase
Assigned (20051116)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
112838 14738 CVE-2005-3532 DEBIAN:DSA-917  View
112839 14738 CVE-2005-3532 URL:http://www.debian.org/security/2005/dsa-917  View
112840 14738 CVE-2005-3532 MISC:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=211920  View
112841 14738 CVE-2005-3532 UBUNTU:USN-226-1  View
112842 14738 CVE-2005-3532 URL:http://www.ubuntulinux.org/support/documentation/usn/usn-226-1  View
112843 14738 CVE-2005-3532 BID:15771  View
112844 14738 CVE-2005-3532 URL:http://www.securityfocus.com/bid/15771/  View
112845 14738 CVE-2005-3532 SECUNIA:17919  View
112846 14738 CVE-2005-3532 URL:http://secunia.com/advisories/17919  View
112847 14738 CVE-2005-3532 SECUNIA:17999  View
112848 14738 CVE-2005-3532 URL:http://secunia.com/advisories/17999  View
112849 14738 CVE-2005-3532 XF:courier-authdaemon-unauth-access(23532)  View

Related JVN