← Database

CVE-2001-1459

HIGH CVSS: 7.5 Published: 2001-06-19 Modified: 2026-06-16

Description

OpenSSH 2.9 and earlier does not initiate a Pluggable Authentication Module (PAM) session if commands are executed with no pty, which allows local users to bypass resource limits (rlimits) set in pam.d.

Affected Platforms

Openbsd Openssh

Weakness Type

NVD-CWE-Other

References