Vulnerability in Linux-Pam

CVE-2009-0579

Linux-PAM before 1.0.4 does not enforce the minimum password age (MINDAYS) as specified in /etc/shadow, which allows local users to bypass intended security policy and change their passwords sooner than specified.

EPSS: 0.004 (27.7th percentile) — read the EPSS interpretation.

Affected products

  • Linux-pam — versions 0.99.1.0, 0.99.2.0, 0.99.2.1
  • N/a — versions n/a

Weakness classification (CWE)

References