Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The SELinux version of PAM before 0.78 r3 allows local users to perform brute force password guessing attacks via unix_chkpwd, which does not log failed guesses or delay its responses.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PAM Unix_Chkpwd暴力密码破解漏洞
Vulnerability Description
PAM(可插拔认证模块)系统安全工具允许系统管理员无需重新编译处理认证的程序便可设置认证策略。 如果启用了SELinux的话，PAM的unix_chkpwd帮助程序验证用户口令的方式存在漏洞，成功利用这个漏洞的攻击者可能猜到其他用户的口令，获得非授权访问。 在通常的环境下，本地非root用户无法通过unix_chkpwd命令验证其他本地用户的口令，但应用补丁添加了SELinux功能，导致本地用户可以对其他本地用户帐号暴力猜测口令: 在SELinux补丁中： /* - * determine the cur
CVSS Information
N/A
Vulnerability Type
N/A