EUVD-2011-4070

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Directory traversal vulnerability in OpenPAM allows privilege escalation via service_name argument

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2011-4122	9 Nov 201100:00	–	circl
CVE	CVE-2011-4122	17 Nov 201119:00	–	cve
Cvelist	CVE-2011-4122	17 Nov 201119:00	–	cvelist
FreeBSD	FreeBSD -- pam_ssh() does not validate service names	23 Dec 201100:00	–	freebsd
FreeBSD Advisory	FreeBSD-SA-11:10.pam	23 Dec 201100:00	–	freebsd_advisory
Tenable Nessus	FreeBSD : FreeBSD -- pam_ssh() does not validate service names (e51d5b1a-4638-11e1-9f47-00e0815b8da8)	31 Jan 201200:00	–	nessus
NVD	CVE-2011-4122	17 Nov 201119:55	–	nvd
OpenVAS	FreeBSD Ports: FreeBSD	12 Feb 201200:00	–	openvas
OpenVAS	FreeBSD Ports: FreeBSD	12 Feb 201200:00	–	openvas
Prion	Directory traversal	17 Nov 201119:55	–	prion

[
  {
    "enisaIdVendor": [
      {
        "id": "1332a7e4-1c14-3139-8788-068733f641b1",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "3250d8c1-7e5f-3bd8-98e5-f3245c73cb34",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
stealth	www.stealth.openwall.net/xSports/pamslam
secunia	www.secunia.com/advisories/46756
openwall	www.openwall.com/lists/oss-security/2011/12/07/3
trac	www.trac.des.no/openpam/changeset/478/trunk/lib/openpam_configure.c
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/71205
osvdb	www.osvdb.org/76945
c-skills	www.c-skills.blogspot.com/2011/11/openpam-trickery.html
openwall	www.openwall.com/lists/oss-security/2011/12/08/9
secunia	www.secunia.com/advisories/46804
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6.1Medium risk

Vulners AI Score6.1

CVSS 26.9

EPSS0.00373

openpam vulnerability privilege escalation freebsd directory traversal