Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
authpam.c in courier-authdaemon for Courier Mail Server 0.37.3 through 0.52.1, when using pam_tally, does not call the pam_acct_mgmt function to verify that access should be granted, which allows attackers to authenticate to the server using accounts that have been disabled.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Courier Mail Server未授权访问漏洞
Vulnerability Description
Courier Mail Server 0.37.3至0.52.1的courier-authdaemon中的authpam.c，在使用pam_tally时，不会调用pam_acct_mgmt函数来验证是否应授予访问权，攻击者可以使用已禁用的帐户认证到服务器。
CVSS Information
N/A
Vulnerability Type
N/A