CVE-2011-4966

EPSS 0.62%

發布日:2013/3/12修改日:2026/4/28

描述

modules/rlm_unix/rlm_unix.c in FreeRADIUS before 2.2.0, when unix mode is enabled for user authentication, does not properly check the password expiration in /etc/shadow, which allows remote authenticated users to authenticate using an expired password.

受影響套件(1)

Debian/freeradiusfrom 0, < 2.1.12+dfsg-1.2

參考連結(1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2011-4966