Beveiligingsadvies

CVE-2011-4966

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2013-03-12 22:00:00
Laatst bijgewerkt 2024-08-07 00:23:39
Toegewezen door redhat
CVSS-score geen score
Status PUBLISHED

Beschrijving

modules/rlm_unix/rlm_unix.c in FreeRADIUS before 2.2.0, when unix mode is enabled for user authentication, does not properly check the password expiration in /etc/shadow, which allows remote authenticated users to authenticate using an expired password.