Lucene search
RedhatCVELIST:CVE-2011-4122HistoryNov 17, 2011 - 7:00 p.m.
CVE-2011-4122
2011-11-1719:00:00
redhat
www.cve.org
2
Directory traversal vulnerability in openpam_configure.c in OpenPAM before r478 on FreeBSD 8.1 allows local users to load arbitrary DSOs and gain privileges via a … (dot dot) in the service_name argument to the pam_start function, as demonstrated by a … in the -c option to kcheckpass.
References
c-skills.blogspot.com/2011/11/openpam-trickery.html
openwall.com/lists/oss-security/2011/12/07/3
openwall.com/lists/oss-security/2011/12/08/9
osvdb.org/76945
secunia.com/advisories/46756
secunia.com/advisories/46804
stealth.openwall.net/xSports/pamslam
trac.des.no/openpam/changeset/478/trunk/lib/openpam_configure.c
exchange.xforce.ibmcloud.com/vulnerabilities/71205
Related
freebsd
freebsd
FreeBSD -- pam_ssh() does not validate service names
2011-12-23 00:00:00
openvas
openvas
FreeBSD Ports: FreeBSD
2012-02-12 00:00:00
FreeBSD Ports: FreeBSD
2012-02-12 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-11:10.pam
2011-12-23 00:00:00
nvd
nvd
CVE-2011-4122
2011-11-17 19:55:01
CVE-2011-5054
2012-01-06 21:55:01
securityvulns
securityvulns
FreeBSD Security Advisory FreeBSD-SA-11:10.pam
2012-01-02 00:00:00
FreeBSD multiple security vulnerabilities
2012-01-02 00:00:00
cve
cve
CVE-2011-4122
2011-11-17 19:55:01
CVE-2011-5054
2012-01-06 21:55:01
prion
prion
Directory traversal
2011-11-17 19:55:00
Design/Logic Flaw
2012-01-06 21:55:00
nessus
nessus
cvelist
cvelist
CVE-2011-5054
2012-01-06 21:00:00