PyPAM vulnerability

2012-03-0800:00:00

ubuntu.com

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.1

Confidence

Low

EPSS

0.502

Percentile

97.5%

JSON

Releases

Ubuntu 11.10
Ubuntu 11.04
Ubuntu 10.10
Ubuntu 10.04

Packages

python-pam - A Python interface to the PAM library

Details

Markus Vervier discovered that PyPAM incorrectly handled passwords
containing NULL bytes. An attacker could exploit this to cause applications
using PyPAM to crash, or possibly execute arbitrary code.

OSVersionArchitecturePackageVersionFilename
Ubuntu11.10noarchpython-pam< 0.4.2-12.2ubuntu2.11.10.1UNKNOWN
Ubuntu11.10noarchpython-pam-dbg< 0.4.2-12.2ubuntu2.11.10.1UNKNOWN
Ubuntu11.04noarchpython-pam< 0.4.2-12.2ubuntu2.11.04.1UNKNOWN
Ubuntu11.04noarchpython-pam-dbg< 0.4.2-12.2ubuntu2.11.04.1UNKNOWN
Ubuntu10.10noarchpython-pam< 0.4.2-12.1ubuntu1.10.10.1UNKNOWN
Ubuntu10.10noarchpython-pam-dbg< 0.4.2-12.1ubuntu1.10.10.1UNKNOWN
Ubuntu10.04noarchpython-pam< 0.4.2-12.1ubuntu1.10.04.1UNKNOWN
Ubuntu10.04noarchpython-pam-dbg< 0.4.2-12.1ubuntu1.10.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	11.10	noarch	python-pam	< 0.4.2-12.2ubuntu2.11.10.1	UNKNOWN
Ubuntu	11.10	noarch	python-pam-dbg	< 0.4.2-12.2ubuntu2.11.10.1	UNKNOWN
Ubuntu	11.04	noarch	python-pam	< 0.4.2-12.2ubuntu2.11.04.1	UNKNOWN
Ubuntu	11.04	noarch	python-pam-dbg	< 0.4.2-12.2ubuntu2.11.04.1	UNKNOWN
Ubuntu	10.10	noarch	python-pam	< 0.4.2-12.1ubuntu1.10.10.1	UNKNOWN
Ubuntu	10.10	noarch	python-pam-dbg	< 0.4.2-12.1ubuntu1.10.10.1	UNKNOWN
Ubuntu	10.04	noarch	python-pam	< 0.4.2-12.1ubuntu1.10.04.1	UNKNOWN
Ubuntu	10.04	noarch	python-pam-dbg	< 0.4.2-12.1ubuntu1.10.04.1	UNKNOWN