Security Advisory

CVE-2011-4966

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2013-03-12 22:00:00
Last updated 2024-08-07 00:23:39
Assigner redhat
CVSS score not scored
State PUBLISHED

Description

modules/rlm_unix/rlm_unix.c in FreeRADIUS before 2.2.0, when unix mode is enabled for user authentication, does not properly check the password expiration in /etc/shadow, which allows remote authenticated users to authenticate using an expired password.