6 matches found
EUVD-2004-2387
Malware in sbrugna...
CVE-2011-5054
kcheckpass passes a user-supplied argument to the pamstart function, often within a setuid environment, which allows local users to invoke any configured PAM stack, and possibly trigger unintended side effects, via an arbitrary valid PAM service name, a different vulnerability than CVE-2011-4122...
OpenPAM - pam_start() Local Privilege Escalation
OpenPAM - pamstart Local Privilege Escalation source: https://www.securityfocus.com/bid/50607/info OpenPAM is prone to a local privilege-escalation vulnerability. Local attackers may exploit this issue to execute arbitrary code with superuser privileges. Successfully exploiting this issue will...
OpenPAM - 'pam_start()' Local Privilege Escalation
source: https://www.securityfocus.com/bid/50607/info OpenPAM is prone to a local privilege-escalation vulnerability. Local attackers may exploit this issue to execute arbitrary code with superuser privileges. Successfully exploiting this issue will result in the complete compromise of affected...
CVE-2004-2396
passwd 0.68 does not check the return code for the pamstart function, which has unknown impact and attack vectors that may prevent "safe and proper operation" of PAM...
CVE-2004-2396
The CVE-2004-2396 issue concerns passwd 0.68 failing to check the return code from pam_start, per Mandrake MDKSA-2004:045. This indicates a potential risk in PAM initialization that could affect safe and proper operation; exact impact is not quantified in the documents. The connected advisory not...