Total vulnerabilities in the database
Solaris 9, when configured as a Kerberos client with patch 112908-12 or 115168-03 and using pam_krb5 as an "auth" module with the debug feature enabled, records passwords in plaintext, which could allow local users to gain other user's passwords by reading log files.
Software | From | Fixed in |
---|---|---|
sun / solaris | 9.0 | 9.0.x |