CVE-2009-2410

The local_handler_callback function in server/responder/pam/pam_LOCAL_domain.c in sssd 0.4.1 does not properly handle blank-password accounts in the SSSD BE…

published July 30, 2009

CVSS
—
EPSS
2%
Percentile
80.4
In the wild
Unconfirmed
What it is

The local_handler_callback function in server/responder/pam/pam_LOCAL_domain.c in sssd 0.4.1 does not properly handle blank-password accounts in the SSSD BE database, which allows context-dependent attackers to obtain access by sending the account's username, in conjunction with an arbitrary password, over an ssh connection.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01979 · 80.4th percentile
Published
2009-07-30T18:00Z
EPSS history
Timeline
  • 30 JUL 18:00Z
    The local_handler_callback function in server/responder/pam/pam_LOCAL_domain.c in sssd 0.4.1 does not properly handle blank-password accounts in the SSSD BE…
    cvelistv5