The pam_userdb module for Pam uses a case-insensitive method to compare hashed passwords, which makes it easier for attackers to guess the password via a brute force attack.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Pam_userdb | Cristian_gafton | - (including) | - (including) |
Pam | Ubuntu | lucid | * |
Pam | Ubuntu | precise | * |
Pam | Ubuntu | quantal | * |
Pam | Ubuntu | raring | * |
Pam | Ubuntu | saucy | * |
Pam | Ubuntu | trusty | * |
Pam | Ubuntu | upstream | * |
Pam | Ubuntu | utopic | * |