104 matches found
AZL-50121 CVE-2024-47191 affecting package oath-toolkit for versions less than 2.6.7-3
pamoath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because, in the context of PAM code running as root, it mishandles usersfile access, such as by calling fchown in the presence of a symlink...
AZL-50124 CVE-2024-47191 affecting package oath-toolkit for versions less than 2.6.9-2
pamoath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because, in the context of PAM code running as root, it mishandles usersfile access, such as by calling fchown in the presence of a symlink...
CVE-2024-47191
CVE-2024-47191 affects oath-toolkit’s PAM module pam_oath.so, with vulnerable versions 2.6.7–2.6.11 (pre-2.6.12). The flaw arises during PAM code execution as root, where the user-credentials file handling can mishandle access to users’ files (e.g., fchown called while a symlink is present), enab...
CBL Mariner 2.0 Security Update: oath-toolkit (CVE-2024-47191)
The version of oath-toolkit installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47191 advisory. - pamoath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because...
CVE-2024-47191
...
CVE-2024-47191
pamoath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because, in the context of PAM code running as root, it mishandles usersfile access, such as by calling fchown in the presence of a symlink...
CVE-2024-47191
pamoath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because, in the context of PAM code running as root, it mishandles usersfile access, such as by calling fchown in the presence of a symlink...
CVE-2024-47191
pamoath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because, in the context of PAM code running as root, it mishandles usersfile access, such as by calling fchown in the presence of a symlink...
Ubuntu 22.04 LTS / 24.04 LTS : OATH Toolkit vulnerability (USN-7059-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7059-1 advisory. Fabian Vogt discovered that OATH Toolkit incorrectly handled file permissions. A remote attacker could possibly use this issue to overwrite root owned...
The vulnerability of the implementation of the OTP mechanism in the OATH Toolkit software for authentication allows a perpetrator to increase their privileges.
The vulnerability of the OATH Toolkit software’sOTP mechanism is related to the incorrect definition of symbolic links before accessing a file. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level and create symbolic links to critical system files...
CVE-2024-47191 affecting package oath-toolkit for versions less than 2.6.7-3
CVE-2024-47191 affecting package oath-toolkit for versions less than 2.6.7-3. A patched version of the package is available...
CVE-2024-47191 affecting package oath-toolkit for versions less than 2.6.9-2
CVE-2024-47191 affecting package oath-toolkit for versions less than 2.6.9-2. A patched version of the package is available...
Debian: Security Advisory (DSA-5784-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE CVE-2024-47191
pamoath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because, in the context of PAM code running as root, it mishandles usersfile access, such as by calling fchown in the presence of a symlink...
[SECURITY] [DSA 5784-1] oath-toolkit security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5784-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 04, 2024 https://www.debian.org/security/faq -...
CVE-2024-47191
pamoath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because, in the context of PAM code running as root, it mishandles usersfile access, such as by calling fchown in the presence of a symlink...
Debian dsa-5784 : liboath-dev - security update
The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5784 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5784-1 [email protected] https://www.debian.org/security/...
OATH Toolkit 安全漏洞
OATH Toolkit is an open source toolkit from deepin. A security vulnerability exists in OATH Toolkit versions 2.6.7 through 2.6.11, which stems from a PAM module that allows a malicious user to compromise the environment when placing an OTP status file in a user's home directory...
UBUNTU-CVE-2024-47191
pamoath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because, in the context of PAM code running as root, it mishandles usersfile access, such as by calling fchown in the presence of a symlink...