EUVD-2015-7651

Malware in sbrugna...

Linux: Read password configuration files (KB)

When a PAM aware privilege granting application is started, it activates its attachment to the PAM-API. This activation performs a number of tasks, the most important being the reading of the configuration files: /etc/pam.conf. Alternatively, this may be the contents of the /etc/pam.d/ directory...

Juniper Networks Junos OS Fail-Open Unauthenticated Root Access Vulnerability

Junos OS is prone to a unauthenticated root access vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos";...

The vulnerability of the Junos operating system, which allows a hacker to increase their privileges

The vulnerability of the Junos operating system is related to the absence of a password request for the root user in case the integrity of the pam.conf file is compromised. Exploiting this vulnerability allows an attacker, operating locally, to increase their privileges by modifying the pam.conf...

Juniper Junos Corrupt pam.conf Security Bypass (JSA10707)

According to its self-reported version number, the remote Juniper Junos device is affected by a security bypass vulnerability due to the 'fail-open' behavior of the pam.conf file. A local attacker can exploit this, by modifying or corrupting the pam.conf file, to gain unauthenticated root access ...

CVE-2015-7751

Juniper Junos OS before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R9, 12.3X48 before 12.3X48-D15, 13.2 before 13.2R7, 13.2X51 before 13.2X51-D35, 13.3 before 13.3R6, 14.1 before 14.1R5, 14.1X50 before 14.1X50-D105, 14.1X51 before 14.1X51-D70, 14.1X53...