Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2009-0887HistoryMar 12, 2009 - 3:20 p.m.
CVE-2009-0887
2009-03-1215:20:50
Debian Security Bug Tracker
security-tracker.debian.org
11
CVSS2
6.6
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:S/C:C/I:C/A:C
EPSS
0.004
Percentile
74.2%
Integer signedness error in the _pam_StrTok function in libpam/pam_misc.c in Linux-PAM (aka pam) 1.0.3 and earlier, when a configuration file contains non-ASCII usernames, might allow remote attackers to cause a denial of service, and might allow remote authenticated users to obtain login access with a different user’s non-ASCII username, via a login attempt.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | pam | < 1.0.1-10 | pam_1.0.1-10_all.deb |
| Debian | 11 | all | pam | < 1.0.1-10 | pam_1.0.1-10_all.deb |
| Debian | 999 | all | pam | < 1.0.1-10 | pam_1.0.1-10_all.deb |
| Debian | 13 | all | pam | < 1.0.1-10 | pam_1.0.1-10_all.deb |
Related
nessus
nessus
GLSA-200909-01 : Linux-PAM: Privilege escalation
2009-09-08 00:00:00
Mandriva Linux Security Advisory : pam (MDVSA-2009:077)
2009-04-23 00:00:00
Fedora 9 : pam-1.0.4-4.fc9 (2009-3231)
2009-04-15 00:00:00
prion
prion
Integer overflow
2009-03-12 15:20:00
securityvulns
securityvulns
Linux-PAM signed/unsignedconversion vulnerability
2009-03-24 00:00:00
[ MDVSA-2009:077 ] pam
2009-03-24 00:00:00
cvelist
cvelist
CVE-2009-0887
2009-03-12 15:00:00
cve
cve
CVE-2009-0887
2009-03-12 15:20:50
gentoo
gentoo
Linux-PAM: Privilege escalation
2009-09-07 00:00:00
openvas
openvas
Fedora Core 10 FEDORA-2009-3204 (pam)
2009-04-15 00:00:00
Fedora Core 9 FEDORA-2009-3231 (pam)
2009-04-15 00:00:00
Mandrake Security Advisory MDVSA-2009:077 (pam)
2009-03-31 00:00:00
nvd
nvd
CVE-2009-0887
2009-03-12 15:20:50
fedora
fedora
[SECURITY] Fedora 9 Update: pam-1.0.4-4.fc9
2009-04-14 15:58:52
[SECURITY] Fedora 10 Update: pam-1.0.4-4.fc10
2009-04-14 15:53:20
ubuntucve
ubuntucve
CVE-2009-0887
2009-03-12 00:00:00
ubuntu
ubuntu
PAM regression
2011-05-31 00:00:00
PAM vulnerabilities
2011-05-30 00:00:00
CVSS2
6.6
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:S/C:C/I:C/A:C
EPSS
0.004
Percentile
74.2%
Related for DEBIANCVE:CVE-2009-0887