[Full-Disclosure] iDEFENSE Security Advisory 06.16.03: Linux-PAM getlogin() Spoofing Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 06.16.03: http://www.idefense.com/advisory/06.16.03.txt Linux-PAM getlogin Spoofing Vulnerability June 16, 2003 I. BACKGROUND The Pluggable Authentication Module PAM is a flexible mechanism for authenticating users. More...

Linux-PAM privelege escalation

It's possible to spoof user's group by spoofing terminal device...

CVE-2003-0388

CVE-2003-0388 concerns the pam_wheel module in Linux-PAM where, if the trust option is enabled and use_uid is disabled, local users can spoof getlogin() results and potentially gain privileges. The issue affects Linux-PAM versions up to 0.77 (notably around the pam_wheel and pam_lastlog handling ...

CVE-2003-0388

pamwheel in Linux-PAM 0.78, with the trust option enabled and the useuid option disabled, allows local users to spoof log entries and gain privileges by causing getlogin to return a spoofed user name...

CVE-2003-0388

pamwheel in Linux-PAM 0.78, with the trust option enabled and the useuid option disabled, allows local users to spoof log entries and gain privileges by causing getlogin to return a spoofed user name...

iDEFENSE Security Advisory 2003-06-16.t

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 06.16.03: http://www.idefense.com/advisory/06.16.03.txt Linux-PAM getlogin Spoofing Vulnerability June 16, 2003 I. BACKGROUND The Pluggable Authentication Module PAM is a flexible mechanism for authenticating users. More...

Linux PAM 0.77 - Pam_Wheel Module getlogin() Username Spoofing Privilege Escalation

Linux PAM 0.77 - PamWheel Module getlogin Username Spoofing Privilege Escalation source: https://www.securityfocus.com/bid/7929/info A vulnerability has been discovered in the Linux-Pam pamwheel module. The problem exists in the way the module authenticates users under certain configurations...

Linux PAM 0.77 - Pam_Wheel Module 'getlogin() Username' Spoofing Privilege Escalation

source: https://www.securityfocus.com/bid/7929/info A vulnerability has been discovered in the Linux-Pam pamwheel module. The problem exists in the way the module authenticates users under certain configurations. Specifically, if the module is configured to allow wheel group members to use the 's...

CVE-2001-1190

The default PAM files included with passwd in Mandrake Linux 8.1 do not support MD5 passwords, which could result in a lower level of password security than intended...

CVE-2000-0378

The pamconsole PAM module in Linux systems performs a chown on various devices upon a user login, but an open file descriptor for those devices can be maintained after the user logs out, which allows that user to sniff activity on these devices when subsequent users log in...

CVE-1999-0342

CVE-1999-0342 : The vulnerability affects Linux PAM modules, described as allowing local users to gain root access using temporary files. The connected sources corroborate a local privilege escalation in PAM, but do not specify affected distributions, versions, or a concrete patch/fix. No exploit...

CVE-1999-0342

Linux PAM modules allow local users to gain root access using temporary files...

max_processes.txt

Subject: Re: limit maximum nr. of processes. To: [email protected] El dia Wed, Sep 01, 1999 at 10:53:48AM +0200, Petter Wahlman escribió: to limit the maximum number of processes you can use the Linux-PAM edit /etc/pam.d/login %PAM-1.0 auth required /lib/security/pamsecuretty.so auth...

pam_unix_passwd.so.txt

Date: Wed, 23 Dec 1998 13:12:45 +0100 From: Michal Zalewski Reply-To: Bugtraq List To: [email protected] Subject: Linux PAM up to 0.64-2 local root compromise As someone said, "Never make any mistaeks." Latest release of Linux Pluggable Authentication Modules pam-0.64-2, as well as previous...

CVE-1999-0342

Linux PAM modules allow local users to gain root access using temporary files...

PT-1998-1081 · Linux · Linux Pam

Name of the Vulnerable Software and Affected Versions: Linux PAM affected versions not specified Description: The issue allows local users to gain root access using temporary files. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...