CVE-2008-1946

The default configuration of su in /etc/pam.d/su in GNU coreutils 5.2.1 allows local users to gain the privileges of a 1 locked or 2 expired account by entering the account name on the command line, related to improper use of the pamsucceedif.so module...

CVE-2008-1946

The default configuration of su in /etc/pam.d/su in GNU coreutils 5.2.1 allows local users to gain the privileges of a 1 locked or 2 expired account by entering the account name on the command line, related to improper use of the pamsucceedif.so module...

libpam-pgsql pam_pgsql.c文件绕过认证漏洞

BUGTRAQ ID: 29360 libpam-pgsql是使用PostgreSQL数据库认证用户的PAM模块。 libpam-pgsql的pampgsql.c文件中的pamsmauthenticate函数存在安全漏洞，如果在认证过程中发送了SIGINT，例如在sudo要求输入用户口令时按下Ctrl+C，则无需输入正确口令sudo也可以成功。 libpam-pgsql 0.6.3 libpam-pgsql ------------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

RHEL 5 : nss_ldap (RHSA-2008:0389)

An updated nssldap package that fixes a security issue and several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The nssldap package contains the nssldap and pamldap modules. The nssldap module is a plug-in which allows...

[SECURITY] Fedora 7 Update: pam_ssh-1.92-2.fc7

This PAM module provides single sign-on behavior for UNIX using SSH keys. Users are authenticated by decrypting their SSH private keys with the password provided. In the first PAM login session phase, an ssh-agent process is started and keys are added. The same agent is used for the following PAM...

Linux SCSI devices unauthorized access

pam module problem allows console users to access generic SCSI and pseudo-SCSI devices directly...

[SECURITY] [DSA 1203-1] New libpam-ldap packages fix access control bypass

-------------------------------------------------------------------------- Debian Security Advisory DSA 1203-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 2nd, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1047-1] New resmgr packages fix unauthorised access

-------------------------------------------------------------------------- Debian Security Advisory DSA 1047-1 [email protected] http://www.debian.org/security/ Martin Schulze April 30th, 2006 http://www.debian.org/security/faq -...

DSA-1047-1 resmgr - programming error

Bulletin has no description...

Debian DSA-388-1 : kdebase - several vulnerabilities

Two vulnerabilities were discovered in kdebase : - CAN-2003-0690 : KDM in KDE 3.1.3 and earlier does not verify whether the pamsetcred function call succeeds, which may allow attackers to gain root privileges by triggering error conditions within PAM modules, as demonstrated in certain...

SUSE-SA:2003:036: pam_smb

The remote host is missing the patch for the advisory SUSE-SA:2003:036 pamsmb. The PAM module and server pamsmb allows users of Linux systems to be authenticated by querying an NT server. Dave Airlie informed us about a bug in the authentication code of pamsmb that allows a remote attacker to gai...

EEYE: Internet Security Systems PAM ICQ Server Response Processing Vulnerability

Internet Security Systems PAM ICQ Server Response Processing Vulnerability Release Date: March 18, 2004 Date Reported: March 8, 2004 Severity: High Remote Code Execution Vendor: Internet Security Systems Systems Affected: RealSecure Network 7.0, XPU 22.11 and before RealSecure Server Sensor 7.0 X...

Important: Red Hat Security Advisory: : Updated XFree86 packages provide security and bug fixes

Updated XFree86 packages for Red Hat Linux 9 provide security fixes to font libraries and XDM. XFree86 is an implementation of the X Window System providing the core graphical user interface and video drivers in Red Hat Linux. XDM is the X display manager. Multiple integer overflows in the transf...

Moderate: Red Hat Security Advisory: : Updated KDE packages fix security issues

Updated KDE packages that resolve a local security issue with KDM PAM support and weak session cookie generation are now available. KDE is a graphical desktop environment for the X Window System. KDE between versions 2.2.0 and 3.1.3 inclusive contain a bug in the KDE Display Manager KDM when...

RUS-CERT Advisory 2001-09:01

Vulnerabilities in PAM and NSS modules using a PostgreSQL database During investigating the problem described in RUS-CERT Advisory 2001-08:01, it became evident that a few PAM and NSS modules which use PostgreSQL as database backend are vulnerable to SQL code injections attacks, too. Systems...

CVE-2000-1189

Buffer overflow in pamlocaluser PAM module in Red Hat Linux 7.x and 6.x allows attackers to gain privileges...

CVE-2000-0668

CVE-2000-0668 affects the Linux pam_console PAM module when a display manager (gdm or kdm) has XDMCP enabled. The vulnerability allows a user to access the system console and reboot the system, with a Medium severity (CVSS v2 base score 5.0) and a Partial availability impact. The provided sources...

CVE-2000-0378

The vulnerability CVE-2000-0378 affects the pam_console PAM module in Linux systems. It arises because the module performs a chown on various devices at user login, and an open file descriptor for those devices can remain open after logout. This allows the user to sniff activity on those devices ...

CVE-2000-0378

The pamconsole PAM module in Linux systems performs a chown on various devices upon a user login, but an open file descriptor for those devices can be maintained after the user logs out, which allows that user to sniff activity on these devices when subsequent users log in...

PT-2010-5671 · Linux +1 · Linux-Pam +1

Name of the Vulnerable Software and Affected Versions: Linux-PAM versions prior to 1.1.2 Description: The issue is related to the run coprocess function in pam xauth.c in the pam xauth module, which does not check the return values of the setuid, setgid, and setgroups system calls. This might all...