NVD

Id
50437  
Name
CVE-2009-3232  
Description
pam-auth-update for PAM, as used in Ubuntu 8.10 and 9.4, and Debian GNU/Linux, does not properly handle an "empty selection" for system authentication modules in certain rare configurations, which causes any attempt to be successful and allows remote attackers to bypass authentication.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-09-17  
Modified Date
2009-09-17  
Seq
2009-3232  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
255133 50437 CVE-2009-3232 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=519927  View
255134 50437 CVE-2009-3232 [oss-security] 20090908 CVE request - Debian/Ubuntu PAM auth module selection  View
255135 50437 CVE-2009-3232 36306  View
255136 50437 CVE-2009-3232 USN-828-1  View
255137 50437 CVE-2009-3232 https://launchpad.net/bugs/410171  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
42743 JVNDB-2009-003750 PAM の pam-auth-update における認証を回避される脆弱性 Ubuntu および Debian GNU/Linux で使用される PAM の pam-auth-update は、特定の稀な設定のシステム認証モジュールである "空白の選択" を適切に処理しないため、認証を回避される脆弱性が存在します。 CVE-2009-3232 40663 CVE-2009-3232 50437 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003750.html 2009-03-16 2012-06-26 View