CVE-2005-2977

The SELinux version of PAM before 0.78 r3 allows local users to perform brute force password guessing attacks via unix_chkpwd, which does not log failed…

published November 1, 2005

CVSS
—
EPSS
0%
Percentile
35.8
In the wild
Unconfirmed
What it is

The SELinux version of PAM before 0.78 r3 allows local users to perform brute force password guessing attacks via unix_chkpwd, which does not log failed guesses or delay its responses.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00428 · 35.8th percentile
Published
2005-11-01T02:00Z
EPSS history
Timeline
  • 01 NOV 02:00Z
    The SELinux version of PAM before 0.78 r3 allows local users to perform brute force password guessing attacks via unix_chkpwd, which does not log failed…
    cvelistv5