PAM 0.76 treats a disabled password as if it were an empty (null) password, which allows local and remote attackers to gain privileges as disabled users.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|
| Pam | Pam | 0.76 (including) | 0.76 (including) |
References
