Amazon Linux AMI : pam (ALAS-2013-160)

A stack-based buffer overflow flaw was found in the way the pamenv module parsed users' '/.pamenvironment' files. If an application's PAM configuration contained 'userreadenv=1' this is not the default, a local attacker could use this flaw to crash the application or, possibly, escalate their...

Oracle Linux 6 : pam (ELSA-2013-0521)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0521 advisory. - fix environment file handling problems - CVE-2011-3148 746619 and CVE-2011-3148 746620 Tenable has extracted the preceding description block directly...

Microsoft Internet Explorer Multiple Vulnerabilities (2846071)

This host is missing a critical security update according to Microsoft Bulletin MS13-055. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Internet Explorer Memory Corruption (MS13-055; CVE-2013-3148)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer...

CentOS Update for pam CESA-2013:0521 centos6

Check for the Version of pam OpenVAS Vulnerability Test CentOS Update for pam CESA-2013:0521 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

CentOS 6 : pam (CESA-2013:0521)

Updated pam packages that fix two security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which...

Medium: pam

Issue Overview: A stack-based buffer overflow flaw was found in the way the pamenv module parsed users' "/.pamenvironment" files. If an application's PAM configuration contained "userreadenv=1" this is not the default, a local attacker could use this flaw to crash the application or, possibly,...

Scientific Linux Security Update : pam on SL6.x i386/x86_64 (20130221)

A stack-based buffer overflow flaw was found in the way the pamenv module parsed users' '/.pamenvironment' files. If an application's PAM configuration contained 'userreadenv=1' this is not the default, a local attacker could use this flaw to crash the application or, possibly, escalate their...

RedHat Update for pam RHSA-2013:0521-02

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RHEL 6 : pam (RHSA-2013:0521)

Updated pam packages that fix two security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which...

CVE-2012-3148

CVE-2012-3148 affects Oracle E-Business Suite 12.1.3, specifically the Oracle Field Service component, with vulnerability tied to Wireless/WAP upload. The issue is described as an unspecified vulnerability that allows remote authenticated users to affect integrity. Connected sources confirm the a...

BELL-CVE-2011-3148 CVE-2011-3148 does not affect BellSoft software

Bulletin has no description...

CVE-2011-3148

CVE-2011-3148 affects Linux-PAM (pam_env) before 1.1.5. The stack-based buffer overflow occurs in the _assemble_line function when parsing a long string of spaces at the beginning of ~/.pam_environment, enabling local users to crash the PAM process and potentially execute arbitrary code. Connecte...

SuSE 11.1 Security Update : pam (SAT Patch Number 5342)

The pamenv module is vulnerable to a stack overflow CVE-2011-3148 and a DoS condition CVE-2011-3149 when parsing users .pamenvironment files. Additionally a missing return value check inside pamxauth has been fixed. CVE-2010-3316 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptiv...

SuSE 10 Security Update : pam (ZYPP Patch Number 7814)

The pamenv module is vulnerable to a stack overflow CVE-2011-3148 and a DoS condition CVE-2011-3149 when parsing users .pamenvironment files. Additionally a missing return value check inside pamxauth has been fixed. CVE-2010-3316 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...

pam: fixing stack overflow (CVE-2011-3148), a local DoS (CVE-2011-3149) and CVE-2010-3316. (important)

The pamenv module is vulnerable to a stack overflow CVE-2011-3148 and a DoS condition CVE-2011-3149 when parsing users .pamenvironment files. Additionally a missing return value check inside pamxauth has been fixed CVE-2010-3316...

SuSE 10 Security Update : pam (ZYPP Patch Number 7815)

The pamenv module is vulnerable to a stack overflow CVE-2011-3148 and a DoS condition CVE-2011-3149 when parsing users .pamenvironment files. Additionally a missing return value check inside pamxauth has been fixed. CVE-2010-3316 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...

pam: fixing stack overflow (CVE-2011-3148) and DoS (CVE-2011-3149) (important)

The pamenv module is vulnerable to a stack overflow CVE-2011-3148 and a DoS condition CVE-2011-3149 when parsing users .pamenvironment files...

[SECURITY] [DSA 2326-1] pam security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2326-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 24, 2011 http://www.debian.org/security/faq -...

CVE-2010-3148

CVE-2010-3148 relates to an insecure library loading vulnerability in Microsoft Visio 2003 SP3. The root cause is loading an unintended DLL (notably mfc71enu.dll) from the current working directory, enabling a Trojan horse DLL to be used via crafted Visio files (e.g., .vsd, .vdx, .vst, .vtx). The...