CVE-2008-1946

The default configuration of su in /etc/pam.d/su in GNU coreutils 5.2.1 allows local users to gain the privileges of a (1) locked or (2) expired account by…

published July 28, 2008

CVSS
—
EPSS
0%
Percentile
23.0
In the wild
Unconfirmed
What it is

The default configuration of su in /etc/pam.d/su in GNU coreutils 5.2.1 allows local users to gain the privileges of a (1) locked or (2) expired account by entering the account name on the command line, related to improper use of the pam_succeed_if.so module.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00313 · 23.0th percentile
Published
2008-07-28T17:00Z
EPSS history
Timeline
  • 28 JUL 17:00Z
    The default configuration of su in /etc/pam.d/su in GNU coreutils 5.2.1 allows local users to gain the privileges of a (1) locked or (2) expired account by…
    cvelistv5