Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
PAM 0.76 treats a disabled password as if it were an empty (null) password, which allows local and remote attackers to gain privileges as disabled users.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Debian Linux PAM验证绕过漏洞
Vulnerability Description
Linux PAM可以用来对用户访问和资源等进行限制。 Debian Linux PAM验证机制存在漏洞，远程攻击者可以利用这个漏洞无需密码访问系统。 PAM 0.76版本把"锁住"的密码(口令文件中的密码字段为'*')作为空密码处理，并可以通过正常的登录过程对系统进行访问。密码文件中所有密码字段为'*'的帐户，并且相关SHELL不为/bin/false的情况下，远程攻击者可以利用这些帐户访问受限制的系统。
CVSS Information
N/A
Vulnerability Type
N/A