« List of all CVEs

CVE-2009-0579

Published: 4/16/2009 Last updated: 8/7/2024 Reserved: 2/13/2009

Linux-PAM before 1.0.4 does not enforce the minimum password age (MINDAYS) as specified in /etc/shadow, which allows local users to bypass intended security policy and change their passwords sooner than specified.

CNA assigner: redhat (53f830b8-0a3f-465b-8143-3b8a9948e749) Requested by: n/a

Opam packages affected (2)

conf-pam pam

Products affected (1)

Product Vendor Version
n/a n/a 12.0.0

References (14)