Debian/libpam-ssh: unknown

The auth_via_key function in pam_ssh.c in pam_ssh before 1.92, when the allow_blank_passphrase option is disabled, allows remote attackers to bypass authentication restrictions and use private encrypt

Action: Upgrade libpam-ssh to 1.91.0-9.2 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2007-0844#Debian:14/libpam-ssh
• https://security-tracker.debian.org/tracker/CVE-2007-0844

published 2007-02-08T17:28:00Z · modified 2026-10-21T17:47:50.651555556Z · JSON