Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 525
Alerts This Week
Warning Icon 1 525

Ubuntu 12.04 LTS: USN-2935-3 Moderate PAM Regression Issue Fix

ubuntu
Calendar Grey March 17, 2016
Scroller Ubuntu
=========================================================================Ubuntu Security Notice USN-
USN-2935-1 introduced a regression in PAM.

Summary

USN-2935-1 introduced a regression in PAM.

Software Description:

- pam: Pluggable Authentication Modules

Details:

USN-2935-1 fixed vulnerabilities in PAM. The updates contained a packaging

change that prevented upgrades in certain multiarch environments. USN-2935-2

intended to fix the problem but was incomplete for Ubuntu 12.04 LTS. This

update fixes the problem in Ubuntu 12.04 LTS.

We apologize for the inconvenience.

Original advisory details:

It was discovered that the PAM pam_userdb module incorrectly used a

case-insensitive method when comparing hashed passwords. A local attacker

could possibly use this issue to make brute force attacks easier. This

issue only affected Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. (CVE-2013-7041)

Sebastian Krahmer discovered that the PAM pam_timestamp module incorrectly

performed filtering. A local attacker could use this issue to create

arbitrary files, or possibly bypass authentication. This issue only

affect...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory update moderate severity authentication ubuntu pam regression issue

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 LTS:
  libpam-modules                  1.1.3-7ubuntu2.3

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-2935-3

https://ubuntu.com/security/notices/USN-2935-1

https://ubuntu.com/security/notices/USN-2935-2, https://bugs.launchpad.net/ubuntu/+source/pam/+bug/1558597

March 17, 2016

Topics%20covered

Topics Covered

security advisory update moderate severity authentication ubuntu pam regression issue

Package Information

https://launchpad.net/ubuntu/+source/pam/1.1.3-7ubuntu2.3

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.