← Back

Andrew Morgan

andrew_morgan

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Linux Pam
linux_pam

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Andrew Morgan
1Linux Pam
Apr 23, 2026
Jan 23, 2007
N/A· v4
N/A· v3
7.2 HIGH· v2
pam_unix.so in Linux-PAM 0.99.7.0 allows context-dependent attackers to log into accounts whose password hash, as stored in /etc/passwd or /etc/shadow, has only two characters.
1Andrew Morgan
1Linux Pam
Apr 16, 2026
Jul 24, 2003
N/A· v4
N/A· v3
4.6 MEDIUM· v2
pam_wheel in Linux-PAM 0.78, with the trust option enabled and the use_uid option disabled, allows local users to spoof log entries and gain privileges by causing getlogin() to return a spoofed user name.