3685 matches found
CVE-1999-1348
Linuxconf on Red Hat Linux 6.0 and earlier does not properly disable PAM-based access to the shutdown command, which could allow local users to cause a denial of service...
CVE-1999-1348
Technical details about CVE-1999-1348 are not publicly provided in the supplied documents. Monitor for updates; the available records describe the issue at a high level without specific impact, affected products, or remediation.
CVE-1999-1346
PAM configuration file for rlogin in Red Hat Linux 6.1 and earlier includes a less restrictive rule before a more restrictive one, which allows users to access the host via rlogin even if rlogin has been explicitly disabled using the /etc/nologin file...
CVE-1999-1158
CVE-1999-1158 describes a buffer overflow in Solaris PAM (versions 2.5.1/2.5) and unix_scheme (Solaris 2.3/2.4) that lets local users gain root privileges through programs that use these modules (e.g., passwd, yppasswd, nispasswd). The root cause is a buffer overflow in the affected modules, enab...
CVE-1999-1346
CVE-1999-1346 affects PAM configuration for rlogin on Red Hat Linux 6.1 and earlier. A less restrictive PAM rule precedes a more restrictive one, allowing users to access the host via rlogin even if /etc/nologin has disabled it. The impact, as described, includes access to the host with potential...
RUS-CERT Advisory 2001-09:01
Vulnerabilities in PAM and NSS modules using a PostgreSQL database During investigating the problem described in RUS-CERT Advisory 2001-08:01, it became evident that a few PAM and NSS modules which use PostgreSQL as database backend are vulnerable to SQL code injections attacks, too. Systems...
CVE-2001-1369
Leon J Breedt pam-pgsql before 0.5.2 allows remote attackers to execute arbitrary SQL code and bypass authentication or modify user account records by injecting SQL statements into user or password fields...
Проблемы с PAM в Qpopper (information leakage)
При использовании pam выдаются разные сообщения об ошибке при неверном пароле и несуществующем пользователе...
qpopper and pam.d
Hello, Take a look at the two sessions I have with Qpopper on a Redhat Linux 7.x box from an RPM package of version 4.0.1. Existing account: root@bart /etc telnet 10.10.10.1 110 Trying 10.10.10.1... Connected to 10.10.10.1. Escape character is '^'. +OK ready [email protected] user...
CVE-2001-1459
OpenSSH 2.9 and earlier does not initiate a Pluggable Authentication Module PAM session if commands are executed with no pty, which allows local users to bypass resource limits rlimits set in pam.d...
[SECURITY] [DSA 025-2] New sparc packages of OpenSSH released
---------------------------------------------------------------------------- Debian Security Advisory DSA-025-2 [email protected] http://www.debian.org/security/ Martin Schulze January 28, 2001 - ---------------------------------------------------------------------------- Package : openssh...
[SECURITY] [DSA 025-1] New sparc packages of OpenSSH released
---------------------------------------------------------------------------- Debian Security Advisory DSA-025-1 [email protected] http://www.debian.org/security/ Martin Schulze January 28, 2001 - ---------------------------------------------------------------------------- Package : openssh...
CVE-2000-1189
Buffer overflow in pamlocaluser PAM module in Red Hat Linux 7.x and 6.x allows attackers to gain privileges...
CVE-2000-0843
Buffer overflow in pamsmb and pamntdom pluggable authentication modules PAM allow remote attackers to execute arbitrary commands via a login with a long user name...
CVE-2000-0843
Buffer overflow in pamsmb and pamntdom pluggable authentication modules PAM allow remote attackers to execute arbitrary commands via a login with a long user name...
CVE-2000-0378
The vulnerability CVE-2000-0378 affects the pam_console PAM module in Linux systems. It arises because the module performs a chown on various devices at user login, and an open file descriptor for those devices can remain open after logout. This allows the user to sniff activity on those devices ...
CVE-2000-0668
CVE-2000-0668 affects the Linux pam_console PAM module when a display manager (gdm or kdm) has XDMCP enabled. The vulnerability allows a user to access the system console and reboot the system, with a Medium severity (CVSS v2 base score 5.0) and a Partial availability impact. The provided sources...
pam_smb / pam_ntdom User Name Remote Overflow
The remote telnet server shuts the connection abruptly when given a long username followed by a password. Although Nessus could not be 100% positive, it may mean that the remote host is using an older pamsmb or pamntdom pluggable authentication module to validate user credentials against a NT...
CVE-2000-0356
Summary: CVE-2000-0356 affects PAM in Red Hat Linux 6.1, where access to disabled NIS accounts is not properly locked. The entry provides no vendor patch/version details or explicit remediation. The CVSSv2 metrics indicate a local, low-complexity flaw with partial confidentiality, integrity, and ...