CVE-2005-1379 The LAM runtime environment package (lam-runtime-7.0.6-2mdk) on Mandrake Linux installs the mpi user without a password, which allows local users to gain privileges.
MediumCVSS 4.6
EPSS 0.36%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The LAM runtime environment package (lam-runtime-7.0.6-2mdk) on Mandrake Linux installs the mpi user without a password, which allows local users to gain privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mandrakesoft mandrake lam-runtime | = 7.0.6.2mdk | No fix listed |
References
- 20050428 insecure user account lam-runtime-7.0.6-2mdk rpm mailing-list
- 13431 vdb-entry vendor-advisory
- Debian Security Tracker CVE-2005-1379 vendor-advisory