CVE-2011-4966

modules/rlm_unix/rlm_unix.c in FreeRADIUS before 2.2.0, when unix mode is enabled for user authentication, does not properly check the password expiration in…

published March 12, 2013

CVSS
—
EPSS
1%
Percentile
71.8
In the wild
Unconfirmed
What it is

modules/rlm_unix/rlm_unix.c in FreeRADIUS before 2.2.0, when unix mode is enabled for user authentication, does not properly check the password expiration in /etc/shadow, which allows remote authenticated users to authenticate using an expired password.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01382 · 71.8th percentile
Published
2013-03-12T22:00Z
EPSS history
Timeline
  • 12 MAR 22:00Z
    modules/rlm_unix/rlm_unix.c in FreeRADIUS before 2.2.0, when unix mode is enabled for user authentication, does not properly check the password expiration in…
    cvelistv5