NVD

Id
71402  
Name
CVE-2004-1001  
Description
Unknown vulnerability in the passwd_check function in Shadow 4.0.4.1, and possibly other versions before 4.0.5, allows local users to conduct unauthorized activities when an error from a pam_chauthtok function call is not properly handled.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2005-03-01  
Modified Date
2017-07-10  
Seq
2004-1001  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
369143 71402 CVE-2004-1001 CLA-2004:894  View
369144 71402 CVE-2004-1001 DSA-585  View
369145 71402 CVE-2004-1001 shadow-pwdcheck-modify-account(17902)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63124 JVNDB-2004-000466 Shadow の passwd_check() 関数におけるセキュリティ制限を回避される脆弱性 Shadow には、pwdcheck.c の passwd_check() 関数において、pam_chauthtok() 関数が返すエラーの処理が不適切であるため、セキュリティ制限を回避される脆弱性が存在します。 CVE-2004-1001 9428 CVE-2004-1001 71402 4.6 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000466.html 2004-10-29 2007-04-01 View