Vulnerabilities > PAM

DATE CVE VULNERABILITY TITLE RISK
2005-11-01 CVE-2005-2977 Unspecified vulnerability in PAM
The SELinux version of PAM before 0.78 r3 allows local users to perform brute force password guessing attacks via unix_chkpwd, which does not log failed guesses or delay its responses.
local
low complexity
pam
2.1
2002-10-28 CVE-2002-1227 Authentication Bypass vulnerability in PAM 0.76
PAM 0.76 treats a disabled password as if it were an empty (null) password, which allows local and remote attackers to gain privileges as disabled users.
network
low complexity
pam
7.5
1998-12-01 CVE-1999-0342 Unspecified vulnerability in PAM
Linux PAM modules allow local users to gain root access using temporary files.
local
high complexity
pam
6.2