Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The pam_unix module in OpenPAM in NetBSD 4.0 before 4.0.2 and 5.0 before 5.0.1 allows local users to change the current root password if it is already known, even when they are not in the wheel group.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
NetBSD pam_unix模块非授权更改root口令漏洞
Vulnerability Description
NetBSD是一款免费开放源代码的UNIX性质的操作系统 。 NetBSD所提供的pam_unix认证模块没有正确地验证执行口令更改的用户，通过认证的非特权用户如果知道了旧的root口令就可以更改该口令。通常认证为root仅限于被称为wheel组的成员，以限制泄露root口令所造成的影响。因此，能够更改root口令应仅限于认证为root的用户 。
CVSS Information
N/A
Vulnerability Type
N/A