remote privilege escalation in pam_smb

2003-09-0315:53:47

lists.opensuse.org

EPSS

0.609

Percentile

97.8%

JSON

The PAM module (and server) pam_smb allows users of Linux systems to be authenticated by querying an NT server. Dave Airlie <airlied@xxxxxxxxx> informed us about a bug in the authentication code of pam_smb that allows a remote attacker to gain access to a system using pam_smb by issuing a too long password string.

OSVersionArchitecturePackageVersionFilename
openSUSE7.2i386pam_smb< 1.1.6-500pam_smb-1.1.6-500.i386.rpm
openSUSE8.2i586pam_smb< 1.1.6-501pam_smb-1.1.6-501.i586.rpm
openSUSE7.3sparcpam_smb< 1.1.6-147pam_smb-1.1.6-147.sparc.rpm
openSUSE8.1i586pam_smb< 1.1.6-500pam_smb-1.1.6-500.i586.rpm
openSUSE7.3ppcpam_smb< 1.1.6-328pam_smb-1.1.6-328.ppc.rpm
openSUSE8.0i386pam_smb< 1.1.6-500pam_smb-1.1.6-500.i386.rpm
openSUSE7.3i386pam_smb< 1.1.6-501pam_smb-1.1.6-501.i386.rpm

OS	Version	Architecture	Package	Version	Filename
openSUSE	7.2	i386	pam_smb	< 1.1.6-500	pam_smb-1.1.6-500.i386.rpm
openSUSE	8.2	i586	pam_smb	< 1.1.6-501	pam_smb-1.1.6-501.i586.rpm
openSUSE	7.3	sparc	pam_smb	< 1.1.6-147	pam_smb-1.1.6-147.sparc.rpm
openSUSE	8.1	i586	pam_smb	< 1.1.6-500	pam_smb-1.1.6-500.i586.rpm
openSUSE	7.3	ppc	pam_smb	< 1.1.6-328	pam_smb-1.1.6-328.ppc.rpm
openSUSE	8.0	i386	pam_smb	< 1.1.6-500	pam_smb-1.1.6-500.i386.rpm
openSUSE	7.3	i386	pam_smb	< 1.1.6-501	pam_smb-1.1.6-501.i386.rpm

EPSS

0.609

Percentile

97.8%

JSON

Related for SUSE-SA:2003:036