CVE-2011-4966
EPSS 0.62%Published: 3/12/2013Modified: 4/28/2026
Description
modules/rlm_unix/rlm_unix.c in FreeRADIUS before 2.2.0, when unix mode is enabled for user authentication, does not properly check the password expiration in /etc/shadow, which allows remote authenticated users to authenticate using an expired password.
Affected packages (1)
- Debian/freeradiusfrom 0, < 2.1.12+dfsg-1.2