CVE-2012-2350

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

pam_shield before 0.9.4: Default configuration does not perform protective action

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
pam-shield	pam-shield	< 0.9.4

References

http://www.openwall.com/lists/oss-security/2012/05/12/3Mailing List, Patch, Third Party Advisory
https://access.redhat.com/security/cve/cve-2012-2350Broken Link
https://security-tracker.debian.org/tracker/CVE-2012-2350Third Party Advisory
http://www.openwall.com/lists/oss-security/2012/05/12/3Mailing List, Patch, Third Party Advisory
https://access.redhat.com/security/cve/cve-2012-2350Broken Link
https://security-tracker.debian.org/tracker/CVE-2012-2350Third Party Advisory

Timeline

Published: Nov 21, 2019
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2012

CVE-2012-23515.0The default configuration of the auth/saml plugin in Mahara before 1.4.2 sets the "Match username attribute to Remote username" option to fa CVE-2012-23527.5The archive management (arc_manage) page in wwsympa/wwsympa.fcgi.in in Sympa before 6.1.11 does not check permissions, which allows remote a CVE-2012-23534.0Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to obtain sensitive user information from hidden fields b CVE-2012-23544.0Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to bypass the moodle/site:readallmessages capability requ CVE-2012-23554.0Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to bypass question:use* capability requirements and add a CVE-2012-23564.0The question-bank functionality in Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to bypass intended cap CVE-2012-23575.0The Multi-Authentication feature in the Central Authentication Service (CAS) functionality in auth/cas/cas_form.html in Moodle 2.1.x before CVE-2012-23585.5Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to bypass an activity's read-only st CVE-2012-23596.5admin/roles/override.php in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to gain CVE-2012-23603.5Cross-site scripting (XSS) vulnerability in the Wiki subsystem in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allo CVE-2012-23613.5Cross-site scripting (XSS) vulnerability in admin/webservice/forms.php in the web services implementation in Moodle 2.0.x before 2.0.9, 2.1.CVE-2012-23622.6Cross-site scripting (XSS) vulnerability in blog/lib.php in the blog implementation in Moodle 1.9.x before 1.9.18, when Internet Explorer is