https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 23:09:47 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-123352 EUVD-2026-123352 https://cve.radiocsirt.org/vuln/euvd-2026-123352 https://cve.radiocsirt.org/vuln/fkie_cve-2009-2410 <p>The local_handler_callback function in server/responder/pam/pam_LOCAL_domain.c in sssd 0.4.1 does not properly handle blank-password accounts in the SSSD BE database, which allows context-dependent attackers to obtain access by sending the account&#39;s username, in conjunction with an arbitrary password, over an ssh connection.</p> <p>The local_handler_callback function in server/responder/pam/pam_LOCAL_domain.c in sssd 0.4.1 does not properly handle blank-password accounts in the SSSD BE database, which allows context-dependent attackers to obtain access by sending the account&#39;s username, in conjunction with an arbitrary password, over an ssh connection.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2009-2410 https://cve.radiocsirt.org/vuln/ghsa-w98w-3mj2-7wj3 <p>The local_handler_callback function in server/responder/pam/pam_LOCAL_domain.c in sssd 0.4.1 does not properly handle blank-password accounts in the SSSD BE database, which allows context-dependent attackers to obtain access by sending the account&#39;s username, in conjunction with an arbitrary password, over an ssh connection.</p> <p>The local_handler_callback function in server/responder/pam/pam_LOCAL_domain.c in sssd 0.4.1 does not properly handle blank-password accounts in the SSSD BE database, which allows context-dependent attackers to obtain access by sending the account&#39;s username, in conjunction with an arbitrary password, over an ssh connection.</p> https://cve.radiocsirt.org/vuln/ghsa-w98w-3mj2-7wj3 https://cve.radiocsirt.org/vuln/gsd-2009-2410 gsd-2009-2410 https://cve.radiocsirt.org/vuln/gsd-2009-2410