Skip to content
OpenAdvisories

Package · crates.io

pam-bindings

1 known vulnerabilities.

1 result · Feed

  • Unscored —

    `PamHandle::get_user` can cause an authentication bypass

    In affected versions, `PamHandle::get_user` can return `Err(PAM_SUCCESS)` after it gets the username successfully. PAM modules that return this "error" code from `sm_authenticate` or `sm_acct_mgmt` early-return a success code to PAM without doing any further …