CVE-2005-2977

CVE-2005-2977 describes a brute-force password guessing vulnerability in the SELinux version of PAM prior to 0.78 r3, specifically affecting the unix_chkpwd component. This flaw allows local attackers to repeatedly attempt passwords without logging failures or response delays, making brute-force attacks feasible. With a low CVSS score of 2.1 (AV:L/AC:L/Au:N/C:P/I:N/A:N), the vulnerability requires local access and primarily impacts confidentiality by potentially exposing user passwords. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this decade-old vulnerability.