The vulnerability of the SUSE Linux Enterprise operating system allows attackers to compromise the confidentiality of protected information.

The vulnerability of the pam-modules-x86 package in the SUSE Linux Enterprise operating system can lead to a violation of the confidentiality of protected information. This vulnerability can be exploited remotely...

Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the pam-devel-64bit package of the SUSE Linux Enterprise operating system can lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited locally...

The vulnerability of the SUSE Linux Enterprise operating system allows attackers to compromise the confidentiality of protected information.

The vulnerability of the pam-modules package in the SUSE Linux Enterprise operating system can lead to a violation of the confidentiality of protected information. This vulnerability can be exploited remotely...

Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the SUSE Linux Enterprise operating system’s pam package can lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited locally...

The vulnerability of the CentOS operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the pamkrb5-2.6.14 package of the CentOS operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploitation of this vulnerability can be carried out locally...

Fedora 20 : sudo-1.8.12-1.fc20 (2015-2247)

update to 1.8.12 - fixes CVE-2014-9680 Update to 1.8.11p2 Major upstream changes & fixes : - when running a command in the background, sudo will now forward SIGINFO to the command - the passwords in ldap.conf and ldap.secret may now be encoded in base64. - SELinux role changes are now audited...

Userhelper-PAM-Path-Vulnerability

synopsis: both 'pam' and 'userhelper' a setuid binary that comes with the 'usermode-1.15' rpm follow .. paths. Since pamstart calls down to pamaddhandler, we can get it to dlopen any file on disk. 'userhelper' being setuid means we can get root...

Fedora Update for pam FEDORA-2014-16350

Check the version of pam SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868616";...

[SECURITY] Fedora 20 Update: pam-1.1.8-2.fc20

PAM Pluggable Authentication Modules is a system security tool that allows system administrators to set authentication policy without having to recompile programs that handle authentication...

Fedora 20 : pam-1.1.8-2.fc20 (2014-16350)

Update fixing minor security issues and bugs. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

CVE-2014-7879

HP HP-UX B.11.11, B.11.23, and B.11.31, when the PAM configuration includes libpamupdbe, allows remote authenticated users to bypass authentication, and consequently execute arbitrary code, via unspecified vectors...

Authentication flaw

HP HP-UX B.11.11, B.11.23, and B.11.31, when the PAM configuration includes libpamupdbe, allows remote authenticated users to bypass authentication, and consequently execute arbitrary code, via unspecified vectors...

CVE-2014-7879

CVE-2014-7879 – HP-UX PAM bypass . Affected: HP-UX B.11.11, B.11.23, and B.11.31 when pam.conf uses libpam_updbe. Root cause: a flaw in pam_updbe handling allows remote authenticated users to bypass authentication and execute arbitrary code via unspecified vectors. CVSS base score in the HP bulle...

CVE-2014-7879

HP HP-UX B.11.11, B.11.23, and B.11.31, when the PAM configuration includes libpamupdbe, allows remote authenticated users to bypass authentication, and consequently execute arbitrary code, via unspecified vectors...

[security bulletin] HPSBUX03166 SSRT101489 rev.1 - HP-UX running PAM libpam_updbe, Remote Authentication Bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04511778 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04511778 Version: 1 HPSBUX03166...

HP-UX PHCO_43874 : s700_800 11.23 libpam_updbe cumulative patch

s700800 11.23 libpamupdbe cumulative patch : A potential security vulnerability has been identified in the HP-UX running PAM using libpamupdbe in pam.conf4. This vulnerability could allow remote users to bypass certain authentication restrictions. References: CVE-2014-7879 SSRT101489. %NASLMINLEV...

Lynis 1.6.4 - Security auditing tool for Unix/Linux systems

Lynis is an open source security auditing tool. Primary goal is to help users with auditing and hardening of Unix and Linux based systems. The software is very flexible and runs on almost every Unix based system including Mac. Even the installation of the software itself is optional! How it works...

[SECURITY] Fedora 20 Update: oath-toolkit-2.4.1-6.fc20

The OATH Toolkit provide components for building one-time password authentication systems. It contains shared libraries, command line tools an d a PAM module. Supported technologies include the event-based HOTP algorithm RFC4226 and the time-based TOTP algorithm RFC6238. OATH stands for Open...

[SECURITY] Fedora 21 Update: oath-toolkit-2.4.1-6.fc21

The OATH Toolkit provide components for building one-time password authentication systems. It contains shared libraries, command line tools an d a PAM module. Supported technologies include the event-based HOTP algorithm RFC4226 and the time-based TOTP algorithm RFC6238. OATH stands for Open...

openSUSE Security Update : sssd (openSUSE-SU-2014:1407-1)

sssd was updated to new upstream release 1.12.2 bugfix release, bnc900159 Changes : - Fixed a regression where the IPA provider did not fetch User Private Groups correctly - An important bug in the GPO access control which resulted in a wrong principal being used, was fixed. - Several new options...