CVE-2002-1227: High severity PAM PAM vulnerability
Published Oct 28, 2002
·Updated
PAM 0.76 treats a disabled password as if it were an empty (null) password, which allows local and remote attackers to gain privileges as disabled users.
Affected Software
1 affected component
PAM PAM=0.76
Remediation
Patch Available
Event History
Oct 28, 2002
CVE Published
05:00 AM
Sep 1, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-1227?
CVE-2002-1227 is considered a critical vulnerability due to its potential to allow unauthorized privileged access.
2
How do I fix CVE-2002-1227?
To fix CVE-2002-1227, upgrade to a patched version of PAM that addresses this security issue.
3
What software is affected by CVE-2002-1227?
CVE-2002-1227 specifically affects PAM version 0.76.
4
Can CVE-2002-1227 be exploited remotely?
Yes, CVE-2002-1227 can be exploited by both local and remote attackers.
5
What impact does CVE-2002-1227 have on user accounts?
CVE-2002-1227 allows attackers to gain privileges as users whose accounts have been disabled.