CVE-2001-1147

The PAM implementation in /bin/login of the util-linux package before 2.11 causes a password entry to be rewritten across multiple PAM calls, which could…

published June 25, 2002

CVSS
—
EPSS
0%
Percentile
36.6
In the wild
Unconfirmed
What it is

The PAM implementation in /bin/login of the util-linux package before 2.11 causes a password entry to be rewritten across multiple PAM calls, which could provide the credentials of one user to a different user, when used in certain PAM modules such as pam_limits.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00434 · 36.6th percentile
Published
2002-06-25T04:00Z
EPSS history
Timeline
  • 25 JUN 04:00Z
    The PAM implementation in /bin/login of the util-linux package before 2.11 causes a password entry to be rewritten across multiple PAM calls, which could…
    cvelistv5