NVD

Id
36554  
Name
CVE-2013-0191  
Description
libpam-pgsql (aka pam_pgsql) 0.7 does not properly handle a NULL value returned by the password search query, which allows remote attackers to bypass authentication via a crafted password.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2014-06-03  
Modified Date
2016-11-28  
Seq
2013-0191  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
186725 36554 CVE-2013-0191 SUSE-SU-2016:1996  View
186726 36554 CVE-2013-0191 SUSE-SU-2016:2089  View
186727 36554 CVE-2013-0191 [oss-security] 20130115 pam-pgsql NULL password handling issue  View
186728 36554 CVE-2013-0191 [oss-security] 20130116 Re: pam-pgsql NULL password handling issue  View
186729 36554 CVE-2013-0191 http://sourceforge.net/p/pam-pgsql/bugs/13/  View
186730 36554 CVE-2013-0191 http://sourceforge.net/u/lvella/pam-pgsql/ci/9361f5970e5dd90a747319995b67c2f73b91448c/  View
186731 36554 CVE-2013-0191 57440  View
186732 36554 CVE-2013-0191 libpampgsql-password-sec-bypass(81363)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24982 JVNDB-2013-006557 libpam-pgsql における認証を回避される脆弱性 libpam-pgsql (別名 pam_pgsql) は、パスワード検索クエリによって返される NULL 値を適切に処理しないため、認証を回避される脆弱性が存在します。 CVE-2013-0191 60133 CVE-2013-0191 36554 5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006557.html 2013-01-15 2014-06-05 View