Vulnerability identifier: #VU45411
Vulnerability risk: Medium
CVSSv3.1: 5.7 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID:
CWE-ID:
CWE-20
Exploitation vector: Network
Exploit availability: No
Vulnerable software:
linux-pam
Other software /
Other software solutions
Vendor: git.kernel.org
Description
The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.
The pam_sm_close_session function in pam_xauth.c in the pam_xauth module in Linux-PAM (aka pam) 1.1.2 and earlier does not properly handle a failure to determine a certain target uid, which might allow local users to delete unintended files by executing a program that relies on the pam_xauth PAM check.
Mitigation
Install update from vendor's website.
Vulnerable software versions
linux-pam: 0.99.1.0 - 1.1.1
External links
http://git.altlinux.org/people/ldv/packages/?p=pam.git;a=commit;h=Linux-PAM-1_1_2-3-g05dafc06cd3dfeb7c4b24942e4e1ae33ff75a123
http://openwall.com/lists/oss-security/2010/10/03/1
http://secunia.com/advisories/49711
http://security.gentoo.org/glsa/glsa-201206-31.xml
http://www.securityfocus.com/bid/46045
http://exchange.xforce.ibmcloud.com/vulnerabilities/65035
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.