Debian/libuser: unknown
libuser before 0.57 uses a cleartext password value of (1) !! or (2) x for new LDAP user accounts, which makes it easier for remote attackers to obtain access by specifying one of these values.
Action: Upgrade libuser to 1:0.56.9.dfsg.1-1.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:0.56.9.dfsg.1-1.1 | - |
Fixed versions
| 1:0.56.9.dfsg.1-1.1 |
Sources
published · modified · JSON