Vulnerability in Pam

CVE-2005-2977

The SELinux version of PAM before 0.78 r3 allows local users to perform brute force password guessing attacks via unix_chkpwd, which does not log failed guesses or delay its responses.

EPSS: 0.004 (35.1th percentile) — read the EPSS interpretation.

Affected products

  • Pam
  • N/a — versions n/a

References