CVE:CVE-2020-13881
CNNVD:CNNVD-202006-576
pam_tacplus是英国Paweł Krawczyk软件开发者的一款用于通过TACACS +（终端访问控制器访问控制系统）对用户进行身份验证的PAM模块。
pam_tacplus 1.3.8版本至1.5.1版本中的support.c文件存在安全漏洞。攻击者可借助syslog利用该漏洞获取机密信息。
solution:Upgrade pam_tacplus_project pam_tacplus to a higher version than 1.5.1,and avoid the version [1.3.8,1.5.1]; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade canonical ubuntu_linux to a higher version than 16.04,18.04,20.04,and avoid the version 16.04,18.04,20.04; Upgrade arista cloudvision_portal to a higher version than 2020.1.2,and avoid the version (,2020.1.2)