Lucene search
HistoryJul 22, 2012 - 5:55 p.m.
CVE-2011-3148
CVSS2
4.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.3
Confidence
High
EPSS
0
Percentile
5.1%
Stack-based buffer overflow in the _assemble_line function in modules/pam_env/pam_env.c in Linux-PAM (aka pam) before 1.1.5 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long string of white spaces at the beginning of the ~/.pam_environment file.
Affected configurations
Node
linux-pamlinux-pamRange≤1.1.4
ORlinux-pamlinux-pamMatch0.99.1.0
ORlinux-pamlinux-pamMatch0.99.2.0
ORlinux-pamlinux-pamMatch0.99.2.1
ORlinux-pamlinux-pamMatch0.99.3.0
ORlinux-pamlinux-pamMatch0.99.4.0
ORlinux-pamlinux-pamMatch0.99.5.0
ORlinux-pamlinux-pamMatch0.99.6.0
ORlinux-pamlinux-pamMatch0.99.6.1
ORlinux-pamlinux-pamMatch0.99.6.2
ORlinux-pamlinux-pamMatch0.99.6.3
ORlinux-pamlinux-pamMatch0.99.7.0
ORlinux-pamlinux-pamMatch0.99.7.1
ORlinux-pamlinux-pamMatch0.99.8.0
ORlinux-pamlinux-pamMatch0.99.8.1
ORlinux-pamlinux-pamMatch0.99.9.0
ORlinux-pamlinux-pamMatch0.99.10.0
ORlinux-pamlinux-pamMatch1.0.0
ORlinux-pamlinux-pamMatch1.0.1
ORlinux-pamlinux-pamMatch1.0.2
ORlinux-pamlinux-pamMatch1.0.3
ORlinux-pamlinux-pamMatch1.0.4
ORlinux-pamlinux-pamMatch1.1.0
ORlinux-pamlinux-pamMatch1.1.1
ORlinux-pamlinux-pamMatch1.1.2
ORlinux-pamlinux-pamMatch1.1.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| linux-pam | linux-pam | * | cpe:2.3:a:linux-pam:linux-pam:*:*:*:*:*:*:*:* |
| linux-pam | linux-pam | 0.99.1.0 | cpe:2.3:a:linux-pam:linux-pam:0.99.1.0:*:*:*:*:*:*:* |
| linux-pam | linux-pam | 0.99.2.0 | cpe:2.3:a:linux-pam:linux-pam:0.99.2.0:*:*:*:*:*:*:* |
| linux-pam | linux-pam | 0.99.2.1 | cpe:2.3:a:linux-pam:linux-pam:0.99.2.1:*:*:*:*:*:*:* |
| linux-pam | linux-pam | 0.99.3.0 | cpe:2.3:a:linux-pam:linux-pam:0.99.3.0:*:*:*:*:*:*:* |
| linux-pam | linux-pam | 0.99.4.0 | cpe:2.3:a:linux-pam:linux-pam:0.99.4.0:*:*:*:*:*:*:* |
| linux-pam | linux-pam | 0.99.5.0 | cpe:2.3:a:linux-pam:linux-pam:0.99.5.0:*:*:*:*:*:*:* |
| linux-pam | linux-pam | 0.99.6.0 | cpe:2.3:a:linux-pam:linux-pam:0.99.6.0:*:*:*:*:*:*:* |
| linux-pam | linux-pam | 0.99.6.1 | cpe:2.3:a:linux-pam:linux-pam:0.99.6.1:*:*:*:*:*:*:* |
| linux-pam | linux-pam | 0.99.6.2 | cpe:2.3:a:linux-pam:linux-pam:0.99.6.2:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2011-3148
2012-07-22 17:00:00
ubuntucve
ubuntucve
CVE-2011-3148
2011-10-24 00:00:00
cve
cve
CVE-2011-3148
2012-07-22 17:55:01
veracode
veracode
Denial Of Service (DoS)
2019-01-15 08:57:42
prion
prion
Stack overflow
2012-07-22 17:55:00
debiancve
debiancve
CVE-2011-3148
2012-07-22 17:55:01
suse
suse
Security update for pam (important)
2011-11-02 23:08:31
Security update for pam (important)
2011-11-03 00:08:45
redhat
redhat
nessus
nessus
RHEL 6 : pam (RHSA-2013:0521)
2013-02-21 00:00:00
Scientific Linux Security Update : pam on SL6.x i386/x86_64 (20130221)
2013-03-01 00:00:00
CentOS 6 : pam (CESA-2013:0521)
2013-03-10 00:00:00
openvas
openvas
RedHat Update for pam RHSA-2013:0521-02
2013-02-22 00:00:00
CentOS Update for pam CESA-2013:0521 centos6
2013-03-12 00:00:00
Debian Security Advisory DSA 2326-1 (pam)
2012-02-11 00:00:00
osv
osv
pam - several
2011-10-24 00:00:00
amazon
amazon
Medium: pam
2013-03-02 16:48:00
debian
debian
[SECURITY] [DSA 2326-1] pam security update
2011-10-24 16:50:48
f5
f5
K16878 : PAM vulnerabilities CVE-2011-3148 and CVE-2011-3149
2015-07-02 00:00:00
SOL16878 - PAM vulnerabilities CVE-2011-3148 and CVE-2011-3149
2015-07-02 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 2326-1] pam security update
2011-10-26 00:00:00
pam buffer overflow
2011-10-26 00:00:00
centos
centos
pam security update
2013-02-27 19:37:13
oraclelinux
oraclelinux
pam security, bug fix, and enhancement update
2013-02-22 00:00:00
ubuntu
ubuntu
PAM vulnerabilities
2011-10-24 00:00:00
gentoo
gentoo
Linux-PAM: Multiple vulnerabilities
2012-06-25 00:00:00
CVSS2
4.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.3
Confidence
High
EPSS
0
Percentile
5.1%
Related for NVD:CVE-2011-3148