Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Gentoo: GLSA-200909-01 Normal: Linux-PAM Privilege Escalation DoS

gentoo
Calendar Grey September 7, 2009
Scroller Gentoo
Uncover the details of Gentoo GLSA-200909-02: Linux-PAM vulnerability leading to privilege escalation, categorized with moderate severity and possible denial-of-service effects.
An error in the handling of user names of Linux-PAM might allow remote attackers to cause a Denial of Service or escalate privileges.

Summary

Gentoo Linux Security Advisory GLSA 200909-01 https://security.gentoo.org/ Severity: Normal Title: Linux-PAM: Privilege escalation Date: September 07, 2009 Bugs: #261512 ID: 200909-01

Synopsis ======= An error in the handling of user names of Linux-PAM might allow remote attackers to cause a Denial of Service or escalate privileges.
Background ========= Linux-PAM (Pluggable Authentication Modules) is an architecture allowing the separation of the development of privilege granting software from the development of secure and appropriate authentication schemes.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 sys-libs/pam < 1.0.4 >= 1.0.4
========== Mar...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service gentoo privilege escalation linux-pam

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory denial of service gentoo privilege escalation linux-pam

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround