Description
passwd 0.68 does not check the return code for the pam_start function, which has unknown impact and attack vectors that may prevent "safe and proper operation" of PAM.
References
- 10370 vdb-entry
- MDKSA-2004:045 vendor-advisory
- passwd-pamstart-improper-validation(16179) vdb-entry
- http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=120060