Debian/yubico-pam: critical 9.8
Yubico PAM Module before 2.10 performed user authentication when 'use_first_pass' PAM configuration option was not used and the module was configured as 'sufficient' in the PAM configuration. A remote
Action: Upgrade yubico-pam to 2.10-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.10-1 | - |
Fixed versions
| 2.10-1 |
Sources
- osv: DEBIAN-CVE-2011-4120#Debian:14/yubico-pam
- https://security-tracker.debian.org/tracker/CVE-2011-4120
published · modified · JSON