CVE-2002-1227

PAM 0.76 treats a disabled password as if it were an empty (null) password, which allows local and remote attackers to gain privileges as disabled users

published September 1, 2004

CVSS
—
EPSS
2%
Percentile
84.0
In the wild
Unconfirmed
What it is

PAM 0.76 treats a disabled password as if it were an empty (null) password, which allows local and remote attackers to gain privileges as disabled users.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02426 · 84.0th percentile
Published
2004-09-01T04:00Z
EPSS history
Timeline
  • 01 SEP 04:00Z
    PAM 0.76 treats a disabled password as if it were an empty (null) password, which allows local and remote attackers to gain privileges as disabled users
    cvelistv5