• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Mandrake passwd PAM md5 Support Lacking Vulnerability

passwd is a Unix utility used to change a user's password. PAM is a modular system for implementing various authentication methods, and is used by passwd in current Mandrake Linux distributions.

In some distributions of Mandrake, the pam files used by passwd do not include support for md5 encryption. After the installation process is complete, any password changes or new accounts created will not have md5 encrypted passwords. This may result in lower security than anticipated.