NVD

Id
47908  
Name
CVE-2009-0579  
Description
Linux-PAM before 1.0.4 does not enforce the minimum password age (MINDAYS) as specified in /etc/shadow, which allows local users to bypass intended security policy and change their passwords sooner than specified.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-04-16  
Modified Date
2009-04-16  
Seq
2009-0579  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
240045 47908 CVE-2009-0579 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=514437  View
240046 47908 CVE-2009-0579 https://bugzilla.redhat.com/show_bug.cgi?id=487216  View
240047 47908 CVE-2009-0579 FEDORA-2009-3204  View
240048 47908 CVE-2009-0579 FEDORA-2009-3231  View
240049 47908 CVE-2009-0579 [pam-list] 20090309 Linux-PAM 1.0.4 released  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
43470 JVNDB-2009-004477 Linux-PAM におけるセキュリティポリシーを回避される脆弱性 Linux-PAM は、/etc/shadow で指定されたパスワード最小有効期限 (MINDAYS) を強制しないため、セキュリティポリシーを回避される、および設定より早くパスワードを変更される脆弱性が存在します。 CVE-2009-0579 38010 CVE-2009-0579 47908 4.6 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004477.html 2009-04-16 2012-09-25 View