CVE-2014-2583
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 4.1%
Multiple directory traversal vulnerabilities in pam_timestamp.c in the pam_timestamp module for Linux-PAM (aka pam) 1.1.8 allow local users to create arbitrary files or possibly bypass authentication via a .. (dot dot) in the (1) PAM_RUSER value to the get_ruser function or (2) PAM_TTY value to the check_tty function, which is used by the format_timestamp_name function.
Produtos afetados
n/a · n/aReferências
http://secunia.com/advisories/57317https://git.fedorahosted.org/cgit/linux-pam.git/commit/?id=Linux-PAM-1_1_8-32-g9dcead8https://security.gentoo.org/glsa/201605-05http://www.openwall.com/lists/oss-security/2014/03/24/5http://www.openwall.com/lists/oss-security/2014/03/26/10http://www.openwall.com/lists/oss-security/2014/03/31/6http://www.securityfocus.com/bid/66493http://www.ubuntu.com/usn/USN-2935-1http://www.ubuntu.com/usn/USN-2935-2http://www.ubuntu.com/usn/USN-2935-3