Debian/libuser: unknown
libuser before 0.57 uses a cleartext password value of (1) !! or (2) x for new LDAP user accounts, which makes it easier for remote attackers to obtain access by specifying one of these values.
Action: Upgrade libuser to 1:0.56.9.dfsg.1-1.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:0.56.9.dfsg.1-1.1 | - |
Fixed versions
| 1:0.56.9.dfsg.1-1.1 |
Sources
- osv: DEBIAN-CVE-2011-0002#Debian:14/libuser
- https://security-tracker.debian.org/tracker/CVE-2011-0002
published · modified · JSON