← Back to CVE List

CVE-2019-19521

Published: 2019-12-05T00:15Z
Last Modified: 2024-11-21T04:34Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
libc in OpenBSD 6.6 allows authentication bypass via the -schallenge username, as demonstrated by smtpd, ldapd, or radiusd. This is related to gen/auth_subr.c and gen/authenticate.c in libc (and login/login.c and xenocara/app/xenodm/greeter/verify.c). > MITRE Terms of Use apply – see LICENSE‑MITRE.txt