|
|
| |
|
| |
libuser: default user password
| Package(s): | libuser |
CVE #(s): | CVE-2011-0002
|
| Created: | January 20, 2011 |
Updated: | April 21, 2011 |
| Description: |
From the Red Hat advisory:
It was discovered that libuser did not set the password entry correctly
when creating LDAP (Lightweight Directory Access Protocol) users. If an
administrator did not assign a password to an LDAP based user account,
either at account creation with luseradd, or with lpasswd after account
creation, an attacker could use this flaw to log into that account with a
default password string that should have been rejected. (CVE-2011-0002)
|
| Alerts: |
|
( Log in to post comments)
|
|
|