OpenBSD Hit with Authentication, LPE Bugs

An authentication bypass and three local privilege-escalation LPE bugs have been uncovered in OpenBSD, the Unix-like open-source operating system known for its security protections. The most severe of the vulnerabilities is the bypass CVE-2019-19521, which is remotely exploitable. OpenBSD uses BS...

CVE-2019-19522

OpenBSD 6.6, in a non-default configuration where S/Key or YubiKey authentication is enabled, allows local users to become root by leveraging membership in the auth group. This occurs because root's file can be written to /etc/skey or /var/db/yubikey, and need not be owned by root...

CVE-2019-19522

OpenBSD 6.6, in a non-default configuration where S/Key or YubiKey authentication is enabled, allows local users to become root by leveraging membership in the auth group. This occurs because root's file can be written to /etc/skey or /var/db/yubikey, and need not be owned by root...

Default configuration

OpenBSD 6.6, in a non-default configuration where S/Key or YubiKey authentication is enabled, allows local users to become root by leveraging membership in the auth group. This occurs because root's file can be written to /etc/skey or /var/db/yubikey, and need not be owned by root...

OpenBSD has an unspecified vulnerability (CNVD-2019-44737)

OpenBSD is a cross-platform, BSD-based UNIX-like operating system from the Canadian OpenBSD project team. A security vulnerability exists in OpenBSD version 6.6. When the S/Key or YubiKey authentication mechanism is turned on, a local attacker can exploit the vulnerability to become the root user...

Qualys Security Advisory - OpenBSD Authentication Bypass / Privilege Escalation

Qualys Security Advisory Authentication vulnerabilities in OpenBSD ============================================================================== Contents ============================================================================== 1. CVE-2019-19521: Authentication bypass 1.1. Analysis 1.2. Cas...

CVE-2019-19522

OpenBSD 6.6, in a non-default configuration where S/Key or YubiKey authentication is enabled, allows local users to become root by leveraging membership in the auth group. This occurs because root's file can be written to /etc/skey or /var/db/yubikey, and need not be owned by root...

CVE-2019-19522

OpenBSD 6.6 is affected when S/Key or YubiKey authentication is enabled (non-default). A local attacker in the auth group can escalate to root because root’s file can be written to /etc/skey or /var/db/yubikey and need not be owned by root. This CVE corresponds to CVE-2019-19522. Reported impact ...

CVE-2019-19522: Incorrect Permission Assignment for Critical Resource

OpenBSD 6.6, in a non-default configuration where S/Key or YubiKey authentication is enabled, allows local users to become root by leveraging membership in the auth group. This occurs because root's file can be written to /etc/skey or /var/db/yubikey, and need not be owned by root...

PT-2019-15867

Name of the Vulnerable Software and Affected Versions OpenBSD version 6.6 Description The issue allows local users to gain root access in a specific non-default configuration where S/Key or YubiKey authentication is enabled. This is possible because a user can write to the /etc/skey or...

Gentoo Security Advisory GLSA 201402-12

Gentoo Linux Local Security Checks GLSA 201402-12 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

CVE-2013-4285

A certain Gentoo patch for the PAM S/Key module does not properly clear credentials from memory, which allows local users to obtain sensitive information by reading system memory...

Design/Logic Flaw

A certain Gentoo patch for the PAM S/Key module does not properly clear credentials from memory, which allows local users to obtain sensitive information by reading system memory...

CVE-2013-4285

The CVE concerns Gentoo’s patch to the PAM S/Key module that fails to clear credentials from memory. A local attacker with privileged access could inspect memory dumps to obtain cleartext credentials. Affected software is the PAM S/Key module used by Gentoo; the underlying issue is that credentia...

CVE-2013-4285

A certain Gentoo patch for the PAM S/Key module does not properly clear credentials from memory, which allows local users to obtain sensitive information by reading system memory...

CVE-2013-4285: Undefined Security Weakness

A certain Gentoo patch for the PAM S/Key module does not properly clear credentials from memory, which allows local users to obtain sensitive information by reading system memory...

PT-2014-2770

Name of the Vulnerable Software and Affected Versions Gentoo affected versions not specified Description The issue is related to a Gentoo patch for the PAM S/Key module, which fails to properly clear credentials from memory. This allows local users to obtain sensitive information by reading syste...

GLSA-201402-12 : PAM S/Key: Information disclosure

The remote host is affected by the vulnerability described in GLSA-201402-12 PAM S/Key: Information disclosure Ulrich Mller reported that a Gentoo patch to PAM S/Key does not remove credentials provided by the user from memory. Impact : A local attacker with privileged access could inspect a memo...

PAM S/Key: Information disclosure

Background PAM S/Key is a pluggable authentication module for the OpenBSD Single-key Password system. Description Ulrich Müller reported that a Gentoo patch to PAM S/Key does not remove credentials provided by the user from memory. Impact A local attacker with privileged access could inspect a...

OpenSSH S/KEY Authentication Account Enumeration

When OpenSSH has S/KEY authentication enabled, it is possible to remotely determine if an account configured for S/KEY authentication exists. Note that Nessus has not attempted to exploit the issue but has instead only checked if OpenSSH is running on the remote host. As a result, it will not...