shadow

Jul 1, 2022 GO-2023-1630

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Jun 23, 2022 GO-2023-1630

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Jun 23, 2022 GO-2023-1630

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Mar 6, 2022 GO-2023-1630

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Feb 16, 2022 GO-2023-1630

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Oct 11, 2021 GO-2023-1630

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Sep 22, 2021 GO-2022-0306 +2 more

  GO-2022-0306: Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy

  GO-2022-0378: MD5 hash support in github.com/foxcpp/maddy

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Aug 9, 2021 GO-2022-0306 +3 more

  GO-2022-0306: Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy

  GO-2022-0374: S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy

  GO-2022-0378: MD5 hash support in github.com/foxcpp/maddy

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Apr 11, 2021 GO-2022-0306 +2 more

  GO-2022-0306: Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy

  GO-2022-0374: S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Dec 13, 2020 GO-2022-0306 +2 more

  GO-2022-0306: Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy

  GO-2022-0374: S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Nov 21, 2020 GO-2022-0306 +2 more

  GO-2022-0306: Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy

  GO-2022-0374: S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Oct 23, 2020 GO-2022-0306 +2 more

  GO-2022-0306: Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy

  GO-2022-0374: S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Aug 23, 2020 GO-2022-0306 +2 more

  GO-2022-0306: Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy

  GO-2022-0374: S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Jul 24, 2020 GO-2022-0306 +2 more

  GO-2022-0306: Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy

  GO-2022-0374: S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Jun 18, 2020 GO-2022-0306 +2 more

  GO-2022-0306: Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy

  GO-2022-0374: S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Jun 2, 2020 GO-2022-0306 +2 more

  GO-2022-0306: Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy

  GO-2022-0374: S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

May 31, 2020 GO-2022-0306 +2 more

  GO-2022-0306: Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy

  GO-2022-0374: S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Changes in this version

type Auth — darwin/amd64, js/wasm, linux/amd64

+ func (a *Auth) Lookup(username string) (string, bool, error)

May 14, 2020 GO-2022-0306 +2 more

  GO-2022-0306: Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy

  GO-2022-0374: S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Mar 26, 2020 GO-2022-0306 +2 more

  GO-2022-0306: Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy

  GO-2022-0374: S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Changes in this version

type Auth — darwin/amd64, js/wasm, linux/amd64

+ func (a *Auth) AuthPlain(username, password string) error

Feb 23, 2020 GO-2022-0306 +1 more

  GO-2022-0306: Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy

  GO-2022-0374: S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy

Feb 22, 2020 GO-2022-0306 +1 more

  GO-2022-0306: Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy

  GO-2022-0374: S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy

Changes in this version

+ var ErrNoSuchUser = errors.New("shadow: user entry is not present in database")

+ var ErrWrongPassword = errors.New("shadow: wrong password")

+ func New(modName, instName string, _, inlineArgs []string) (module.Module, error) — darwin/amd64, js/wasm, linux/amd64

+ type Auth struct — darwin/amd64, js/wasm, linux/amd64

+ Log log.Logger

+ func (a *Auth) CheckPlain(username, password string) bool

+ func (a *Auth) Init(cfg *config.Map) error

+ func (a *Auth) InstanceName() string

+ func (a *Auth) Name() string

+ type Entry struct

+ AcctExpiry int

+ Flags int

+ InactivityPeriod int

+ LastChange int

+ MaxPassAge int

+ MinPassAge int

+ Name string

+ Pass string

+ WarnPeriod int

+ func Lookup(name string) (*Entry, error)

+ func Read() ([]Entry, error)

+ func (e *Entry) IsAccountValid() bool

+ func (e *Entry) IsPasswordValid() bool

+ func (e *Entry) VerifyPassword(pass string) (err error)