Unrated severityNVD Advisory· Published Sep 16, 2005· Updated Apr 16, 2026
CVE-2005-2949
CVE-2005-2949
Description
pam_per_user before 0.4 does not verify if the user name changes between authentication attempts and uses the same subrequest handle, which allows remote attackers or local users to login as other users by using certain applications that allow the username to be changed during authentication, such as /bin/login.
Affected products
3cpe:2.3:a:mark_d._roth:pam_per_user:0.1:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:mark_d._roth:pam_per_user:0.1:*:*:*:*:*:*:*
- cpe:2.3:a:mark_d._roth:pam_per_user:0.2:*:*:*:*:*:*:*
- cpe:2.3:a:mark_d._roth:pam_per_user:0.3:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- secunia.com/advisories/16781/nvdPatchVendor Advisory
- www.securityfocus.com/bid/14813nvdPatch
- marc.infonvd
- securityreason.com/securityalert/2nvd
News mentions
0No linked articles in our index yet.