Lucene search
PRIOn knowledge basePRION:CVE-2011-4122HistoryNov 17, 2011 - 7:55 p.m.
Directory traversal
2011-11-1719:55:00
PRIOn knowledge base
www.prio-n.com
2
Directory traversal vulnerability in openpam_configure.c in OpenPAM before r478 on FreeBSD 8.1 allows local users to load arbitrary DSOs and gain privileges via a … (dot dot) in the service_name argument to the pam_start function, as demonstrated by a … in the -c option to kcheckpass.
References
openwall.com/lists/oss-security/2011/12/07/3
openwall.com/lists/oss-security/2011/12/08/9
osvdb.org/76945
secunia.com/advisories/46756
secunia.com/advisories/46804
stealth.openwall.net/xSports/pamslam
trac.des.no/openpam/changeset/478/trunk/lib/openpam_configure.c
c-skills.blogspot.com/2011/11/openpam-trickery.html
exchange.xforce.ibmcloud.com/vulnerabilities/71205
Related
freebsd
freebsd
FreeBSD -- pam_ssh() does not validate service names
2011-12-23 00:00:00
openvas
openvas
FreeBSD Ports: FreeBSD
2012-02-12 00:00:00
FreeBSD Ports: FreeBSD
2012-02-12 00:00:00
cvelist
cvelist
CVE-2011-4122
2011-11-17 19:00:00
CVE-2011-5054
2012-01-06 21:00:00
nessus
nessus
freebsd_advisory
freebsd_advisory
FreeBSD-SA-11:10.pam
2011-12-23 00:00:00
nvd
nvd
CVE-2011-4122
2011-11-17 19:55:01
CVE-2011-5054
2012-01-06 21:55:01
securityvulns
securityvulns
FreeBSD Security Advisory FreeBSD-SA-11:10.pam
2012-01-02 00:00:00
FreeBSD multiple security vulnerabilities
2012-01-02 00:00:00
cve
cve
CVE-2011-4122
2011-11-17 19:55:01
CVE-2011-5054
2012-01-06 21:55:01
prion
prion
Design/Logic Flaw
2012-01-06 21:55:00