RedHat Linux 5.2 i3866.0 - No Logging

RedHat Linux 5.2 i3866.0 - No Logging source: https://www.securityfocus.com/bid/320/info A vulnerability in PAM allows local malicious users to brute force passwords via the su command without any logging of their activity. su is a command that allows users to change identifies by supplying a...

RedHat Linux 5.2 i386/6.0 - No Logging

source: https://www.securityfocus.com/bid/320/info A vulnerability in PAM allows local malicious users to brute force passwords via the su command without any logging of their activity. su is a command that allows users to change identifies by supplying a password. If the password is correct su...

CVE-1999-0342

Linux PAM modules allow local users to gain root access using temporary files...

PT-1998-1081 · Linux · Linux Pam

Name of the Vulnerable Software and Affected Versions: Linux PAM affected versions not specified Description: The issue allows local users to gain root access using temporary files. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

Sun Solaris 2.5.1 PAM unix_scheme - passwd Local Privilege Escalation

Sun Solaris 2.5.1 PAM unixscheme - passwd Local Privilege Escalation / source: https://www.securityfocus.com/bid/201/info There is a buffer overflow condition on arguments in Pluggable Authentication Modules PAM and unixscheme 5.4 and 5.3. Therefore, an unauthorized user could exploit this...

DUO-PSA-2018-001: Duo Product Security Advisory

Duo Product Security Advisory Advisory ID: DUO-PSA-2018-001 Publication Date: 2018-03-06 Revision Date: 2018-03-06 Status: Confirmed, Fixed Document Revision: 1 Overview Duo has identified and fixed an issue with our public documentation on the Duo Unix integration. The suggested Pluggable...

DUO-PSA-2018-001: Duo Product Security Advisory

Duo Product Security Advisory Advisory ID: DUO-PSA-2018-001 Publication Date: 2018-03-06 Revision Date: 2018-03-06 Status: Confirmed, Fixed Document Revision: 1 Overview Duo has identified and fixed an issue with our public documentation on the Duo Unix integration. The suggested Pluggable...

PT-2010-5671 · Linux +1 · Linux-Pam +1

Name of the Vulnerable Software and Affected Versions: Linux-PAM versions prior to 1.1.2 Description: The issue is related to the run coprocess function in pam xauth.c in the pam xauth module, which does not check the return values of the setuid, setgid, and setgroups system calls. This might all...