218 matches found
Ubuntu USN-719-1 (libpam-krb5)
The remote host is missing an update to libpam-krb5 announced via advisory USN-719-1. OpenVAS Vulnerability Test $Id: ubuntu7191.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7191.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-719-1 libpam-krb5 Authors:...
Ubuntu 8.04 LTS / 8.10 : libpam-krb5 vulnerabilities (USN-719-1)
It was discovered that pamkrb5 parsed environment variables when run with setuid applications. A local attacker could exploit this flaw to bypass authentication checks and gain root privileges. CVE-2009-0360 Derek Chan discovered that pamkrb5 incorrectly handled refreshing existing credentials wh...
Mandrake Security Advisory MDVSA-2009:077 (pam)
The remote host is missing an update to pam announced via advisory MDVSA-2009:077. OpenVAS Vulnerability Test $Id: mdksa2009077.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:077 pam Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
CVE-2009-0361
CVE-2009-0361 concerns pam_krb5 in libpam-krb5 and related components. Concrete details in connected documents show that pam_krb5 fails to handle pam_setcred correctly when a process runs setuid, enabling a local user to create or modify arbitrary files by setting the KRB5CCNAME environment varia...
Debian Security Advisory DSA 1721-1 (libpam-krb5)
The remote host is missing an update to libpam-krb5 announced via advisory DSA 1721-1. OpenVAS Vulnerability Test $Id: deb17211.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1721-1 libpam-krb5 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
Debian Security Advisory DSA 1722-1 (libpam-heimdal)
The remote host is missing an update to libpam-heimdal announced via advisory DSA 1722-1. OpenVAS Vulnerability Test $Id: deb17221.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1722-1 libpam-heimdal Authors: Thomas Reinke Copyright: Copyright c 2009 E-Sof...
Debian: Security Advisory (DSA-1721-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DSA-1722-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-1721-1 : libpam-krb5 - several vulnerabilities
Several local vulnerabilities have been discovered in the PAM module for MIT Kerberos. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0360 Russ Allbery discovered that the Kerberos PAM module parsed configuration settings from environment variables...
Debian DSA-1722-1 : libpam-heimdal - programming error
Derek Chan discovered that the PAM module for the Heimdal Kerberos implementation allows reinitialisation of user credentials when run from a setuid context, resulting in potential local denial of service by overwriting the credential cache file or to local privilege escalation. %NASLMINLEVEL 703...
USN-719-1: pam-krb5 vulnerabilities
It was discovered that pamkrb5 parsed environment variables when run with setuid applications. A local attacker could exploit this flaw to bypass authentication checks and gain root privileges. CVE-2009-0360 Derek Chan discovered that pamkrb5 incorrectly handled refreshing existing credentials wh...
[SECURITY] [DSA 1722-1] New libpam-heimdal packages fix local privilege escalation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1722-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 11, 2009 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1722-1] New libpam-heimdal packages fix local privilege escalation
------------------------------------------------------------------------ Debian Security Advisory DSA-1722-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 11, 2009 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1721-1] New libpam-krb5 packages fix local privilege escalation
------------------------------------------------------------------------ Debian Security Advisory DSA-1721-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 11, 2009 http://www.debian.org/security/faq -...
DSA-1722-1 libpam-heimdal - local privilege
Bulletin has no description...
DSA-1721-1 libpam-krb5 - local privilege
Bulletin has no description...
CVE-2008-5138
passwdehd in libpam-mount 0.43 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/passwdehd. temporary file...
DEBIAN-CVE-2008-5138
passwdehd in libpam-mount 0.43 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/passwdehd. temporary file...
