Solaris 9, when configured as a Kerberos client with patch 112908-12 or 115168-03 and using pam_krb5 as an auth module with the debug feature enabled, records passwords in plaintext, which could allow local users to gain other users passwords by reading log files.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Solaris | Sun | 9.0 (including) | 9.0 (including) |