Gentoo Security Advisory GLSA 200909-01 (pam)

The remote host is missing updates announced in advisory GLSA 200909-01. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

USN-828-1: PAM vulnerability

Russell Senior discovered that the system authentication module selection mechanism for PAM did not safely handle an empty selection. If an administrator had specifically removed the default list of modules or failed to chose a module when operating debconf in a very unlikely non-default...

GLSA-200909-01 : Linux-PAM: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-200909-01 Linux-PAM: Privilege escalation Marcus Granado repoted that Linux-PAM does not properly handle user names that contain Unicode characters. This is related to integer signedness errors in the pamStrTok function in...

Linux-PAM: Privilege escalation

Background Linux-PAM Pluggable Authentication Modules is an architecture allowing the separation of the development of privilege granting software from the development of secure and appropriate authentication schemes. Description Marcus Granado repoted that Linux-PAM does not properly handle user...

Solaris 10 (sparc) : 138874-05

SunOS 5.10: Native LDAP, PAM, name-service. Date this patch was last updated by Sun : Aug/17/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

[SECURITY] Fedora 9 Update: pam_krb5-2.3.5-1.fc9

This is pamkrb5, a pluggable authentication module that can be used with Linux-PAM and Kerberos 5. This module supports password checking, ticket creation, and optional TGT verification and conversion to Kerberos IV ticke ts. The included pamkrb5afs module also gets AFS tokens if so configured...

[SECURITY] Fedora 11 Update: pam_krb5-2.3.5-1.fc11

This is pamkrb5, a pluggable authentication module that can be used with Linux-PAM and Kerberos 5. This module supports password checking, ticket creation, and optional TGT verification and conversion to Kerberos IV ticke ts. The included pamkrb5afs module also gets AFS tokens if so configured...

[SECURITY] Fedora 10 Update: pam_krb5-2.3.5-1.fc10

This is pamkrb5, a pluggable authentication module that can be used with Linux-PAM and Kerberos 5. This module supports password checking, ticket creation, and optional TGT verification and conversion to Kerberos IV ticke ts. The included pamkrb5afs module also gets AFS tokens if so configured...

RedHat Security Advisory RHSA-2008:0002

The remote host is missing updates announced in advisory RHSA-2008:0002. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

RedHat Security Advisory RHSA-2008:0002

The remote host is missing updates announced in advisory RHSA-2008:0002. OpenVAS Vulnerability Test $Id: RHSA20080002.nasl 6683 2017-07-12 09:41:57Z cfischer $ Description: Auto-generated from advisory RHSA-2008:0002 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

HP-UX Update for PAM Kerberos HPSBUX02415

Check for the Version of PAM Kerberos OpenVAS Vulnerability Test HP-UX Update for PAM Kerberos HPSBUX02415 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

HP-UX Update for PAM Kerberos HPSBUX02415

Check for the Version of PAM Kerberos OpenVAS Vulnerability Test HP-UX Update for PAM Kerberos HPSBUX02415 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

[SECURITY] Fedora 9 Update: pam_ssh-1.92-10.fc9

This PAM module provides single sign-on behavior for UNIX using SSH keys. Users are authenticated by decrypting their SSH private keys with the password provided. In the first PAM login session phase, an ssh-agent process is started and keys are added. The same agent is used for the following PAM...

[SECURITY] Fedora 10 Update: pam_ssh-1.92-10.fc10

This PAM module provides single sign-on behavior for UNIX using SSH keys. Users are authenticated by decrypting their SSH private keys with the password provided. In the first PAM login session phase, an ssh-agent process is started and keys are added. The same agent is used for the following PAM...

Mandriva Linux Security Advisory : pam (MDVSA-2009:077)

A security vulnerability has been identified and fixed in pam : Integer signedness error in the pamStrTok function in libpam/pammisc.c in Linux-PAM aka pam 1.0.3 and earlier, when a configuration file contains non-ASCII usernames, might allow remote attackers to cause a denial of service, and mig...

MDKA-2007:067 : rsh

The rsh-server package contained incorrect PAM authentication configuration files that prevented clients from being able to access the server. The updated package contains corrected versions of these configuration files and allows correct access to the server. %NASLMINLEVEL 999999 @DEPRECATED@ Th...

Fedora 10 : pam-1.0.4-4.fc10 (2009-3204)

Update to new minor upstream release. Minor security issue fixes and bug fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Solaris 2.5.1 (x86) : 104434-08

SunOS 5.5.1x86: pam security patch. Date this patch was last updated by Sun : Oct/06/98 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 2.6 (sparc) : 106271-09

SunOS 5.6: /usr/lib/security/pamunix.so.1. Date this patch was last updated by Sun : Jan/04/02 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

CVE-2009-0579

Linux-PAM before 1.0.4 does not enforce the minimum password age MINDAYS as specified in /etc/shadow, which allows local users to bypass intended security policy and change their passwords sooner than specified...