Linux: Lockout time for locked accounts

The lockout time for locked accounts can be set in two modules: - pamtally2: The login counter tallying module - pamfaillock: Module counting authentication failures during a specified interval Use the unlocktime=n option to re-enable login after n seconds after the lock out. Copyright C 2020...

NewStart CGSL CORE 5.05 / MAIN 5.05 : sudo Vulnerability (NS-SA-2020-0004)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has sudo packages installed that are affected by a vulnerability: - In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause...

EulerOS Virtualization for ARM 64 3.0.5.0 : sudo (EulerOS-SA-2020-1086)

According to the version of the sudo package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and sessio...

EulerOS 2.0 SP2 : sudo (EulerOS-SA-2019-2414)

According to the version of the sudo package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cau...

EulerOS 2.0 SP8 : sudo (EulerOS-SA-2019-2304)

According to the version of the sudo package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cau...

Exploit for Improper Handling of Exceptional Conditions in Sudo_Project Sudo

Sudo-Security-Bypass-CVE-2019-14287 ==========================...

Debian: Security Advisory (DLA-1964-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 1964-1] sudo security update

Package : sudo Version : 1.8.10p3-1+deb8u6 CVE ID : CVE-2019-14287 Debian Bug : 942322 In sudo, a program that provides limited super user privileges to specific users, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can caus...

CVE-2019-14287

CVE-2019-14287 affects sudo before 1.8.28. An attacker with a Runas ALL sudoer account can bypass policy blacklists and session PAM modules and cause incorrect logging by invoking sudo with a crafted user ID (example: sudo -u $((0xffffffff))). This corresponds to a local privilege-escalation flaw...

CVE-2019-14287

In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER= logging, for a "su...

UBUNTU-CVE-2019-14287

In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER= logging, for a "su...

OpenSSH < 3.8p1 Multiple Vulnerabilities

Binary data 701169.prm...

SUSE SLES11 Security Update : pam-modules (SUSE-SU-2018:1760-1)

This update for pam-modules fixes the following security issue : - CVE-2011-3172: Ensure that unix2chkpwd calls pamacctmgmt to prevent usage of locked accounts bsc707645. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE-SU-2018:1760-1 Security update for pam-modules

This update for pam-modules fixes the following security issue: - CVE-2011-3172: Ensure that unix2chkpwd calls pamacctmgmt to prevent usage of locked accounts bsc707645...

Micro Focus SUSE Linux Enterprise Information Disclosure Vulnerability

Micro Focus SUSE Linux Enterprise is a suite of enterprise Linux operating systems from Micro Focus in the UK. A security vulnerability exists in pammodules in versions of Micro Focus SUSE Linux Enterprise prior to 12. An attacker could exploit the vulnerability to log in to an account that shoul...

The vulnerability of the SUSE Linux Enterprise operating system allows attackers to compromise the confidentiality of protected information.

The vulnerability of the pam-modules-11 package in the SUSE Linux Enterprise operating system can lead to a violation of the confidentiality of protected information. This vulnerability can be exploited remotely...

The vulnerability of the SUSE Linux Enterprise operating system allows attackers to compromise the confidentiality of protected information.

The vulnerability of the pam-modules-x86-11 package in the SUSE Linux Enterprise operating system can lead to a violation of the confidentiality of protected information. This vulnerability can be exploited remotely...

The vulnerability of the SUSE Linux Enterprise operating system allows attackers to compromise the confidentiality of protected information.

The vulnerability of the pam-modules-10 package in the SUSE Linux Enterprise operating system can lead to a violation of the confidentiality of protected information. This vulnerability can be exploited remotely...

The vulnerability of the SUSE Linux Enterprise operating system allows attackers to compromise the confidentiality of protected information.

The vulnerability of the pam-modules-32bit package of the SUSE Linux Enterprise operating system can lead to a violation of the confidentiality of protected information. This vulnerability can be exploited remotely...

The vulnerability of the SUSE Linux Enterprise operating system allows attackers to compromise the confidentiality of protected information.

The vulnerability of the pam-modules-64bit package on the SUSE Linux Enterprise operating system can lead to a violation of the confidentiality of protected information. This vulnerability can be exploited remotely...