6

CVE-2011-4966

modules/rlm_unix/rlm_unix.c in FreeRADIUS before 2.2.0, when unix mode is enabled for user authentication, does not properly check the password expiration in /etc/shadow, which allows remote authenticated users to authenticate using an expired password.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
FreeradiusFreeradius Version <= 2.2.0
FreeradiusFreeradius Version0.1
FreeradiusFreeradius Version0.2
FreeradiusFreeradius Version0.3
FreeradiusFreeradius Version0.4
FreeradiusFreeradius Version0.5
FreeradiusFreeradius Version0.6
FreeradiusFreeradius Version0.7
FreeradiusFreeradius Version0.7.1
FreeradiusFreeradius Version0.8
FreeradiusFreeradius Version0.8.1
FreeradiusFreeradius Version0.9
FreeradiusFreeradius Version0.9.0
FreeradiusFreeradius Version0.9.1
FreeradiusFreeradius Version0.9.2
FreeradiusFreeradius Version0.9.3
FreeradiusFreeradius Version1.0.0
FreeradiusFreeradius Version1.0.1
FreeradiusFreeradius Version1.0.2
FreeradiusFreeradius Version1.0.3
FreeradiusFreeradius Version1.0.4
FreeradiusFreeradius Version1.0.5
FreeradiusFreeradius Version1.1.0
FreeradiusFreeradius Version1.1.1
FreeradiusFreeradius Version1.1.2
FreeradiusFreeradius Version1.1.3
FreeradiusFreeradius Version1.1.4
FreeradiusFreeradius Version1.1.5
FreeradiusFreeradius Version1.1.6
FreeradiusFreeradius Version1.1.7
FreeradiusFreeradius Version1.1.8
FreeradiusFreeradius Version2.0
FreeradiusFreeradius Version2.0.1
FreeradiusFreeradius Version2.0.2
FreeradiusFreeradius Version2.0.3
FreeradiusFreeradius Version2.0.4
FreeradiusFreeradius Version2.0.5
FreeradiusFreeradius Version2.1.0
FreeradiusFreeradius Version2.1.1
FreeradiusFreeradius Version2.1.2
FreeradiusFreeradius Version2.1.3
FreeradiusFreeradius Version2.1.4
FreeradiusFreeradius Version2.1.6
FreeradiusFreeradius Version2.1.7
FreeradiusFreeradius Version2.1.8
FreeradiusFreeradius Version2.1.9
FreeradiusFreeradius Version2.1.10
FreeradiusFreeradius Version2.1.11
FreeradiusFreeradius Version2.1.12
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.62% 0.692
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6 6.8 6.4
AV:N/AC:M/Au:S/C:P/I:P/A:P