Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

Ubuntu 16.04 LTS: 4552-2 Critical: Pam-Python Program Execution Risk

ubuntu
Calendar Grey October 21, 2020
Dist Ubuntu Esm H88
A critical pam-python flaw permits local privilege escalation to administrator status by altering environment variables in Ubuntu systems.
Pam-python could be made to crash or run programs as an administrator if certain environment variables are set.

Summary

Pam-python could be made to crash or run programs as an administrator

if certain environment variables are set.

Software Description:

- pam-python: Enables PAM modules to be written in Python

Details:

Malte Kraus discovered that Pam-python mishandled certain environment

variables. A local attacker could potentially use this vulnerability to

execute programs as root.

Topics%20covered

Topics Covered

security advisory local attack ubuntu program execution pam-python

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS:
  libpam-python                   1.0.4-1.1+deb8u1build0.16.04.1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4552-2

https://ubuntu.com/security/notices/USN-4552-1

CVE-2019-16729

Severity
critical
Lowest
Low
Medium
High
Critical

October 21, 2020

Topics%20covered

Topics Covered

security advisory local attack ubuntu program execution pam-python

Package Information

https://launchpad.net/ubuntu/+source/pam-python/1.0.4-1.1+deb8u1build0.16.04.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here