Debian/google-authenticator: unknown
pam_google_authenticator.c in the PAM module in Google Authenticator before 1.0 requires user-readable permissions for the secret file, which allows local users to bypass intended access restrictions
Action: Upgrade google-authenticator to 20130529-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 20130529-1 | - |
Fixed versions
| 20130529-1 |
Sources
- osv: DEBIAN-CVE-2012-6140#Debian:14/google-authenticator
- https://security-tracker.debian.org/tracker/CVE-2012-6140
published · modified · JSON