CVE-2014-2583

CVE-2014-2583 is a vulnerability in the pam_timestamp module of Linux-PAM (pam) 1.1.8 where a crafted ".." in PAM_RUSER or PAM_TTY to format_timestamp_name enables local users to create arbitrary files or potentially bypass authentication via directory traversal in pam_timestamp.c (get_ruser/chec...