VULNERABILITY INTELLIGENCE
CVE-2005-2977
CVSS score2.1 LOW
EPSS probability0.43%
CISA KEVNot currently listed
Published2005-11-01
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:N/A:N
Description
The SELinux version of PAM before 0.78 r3 allows local users to perform brute force password guessing attacks via unix_chkpwd, which does not log failed guesses or delay its responses.