PT-2008-3472 · Linux Pam+2 · Pam Succeed If.So+2

Publicado 2008-07-24 · Atualizado 2017-09-29 · CVE-2008-1946

Positive Technologies (AI Summary)

CVSS v2.0

4.4

Média

Vetor base

AV:L/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions GNU coreutils version 5.2.1

Description The default configuration of su in /etc/pam.d/su allows local users to gain the privileges of a locked or expired account by entering the account name on the command line. This issue is related to the improper use of the pam succeed if.so module.

Recommendations For GNU coreutils version 5.2.1, consider modifying the /etc/pam.d/su configuration to properly handle locked or expired accounts, ensuring that the pam succeed if.so module is used correctly to prevent unauthorized privilege escalation.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2008-1946

RHSA-2008:0780

RHSA-2008_0780

Produtos afetados

Gnu Coreutils

Red Hat

Pam Succeed If.So

Referências · 12

• http://secunia.com/advisories/31225 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-1946 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2008-1946 · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2008:0780 · Nota
• http://rhn.redhat.com/errata/RHSA-2008-0780.html · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2008-1946 · Aviso do Fabricante
• http://securitytracker.com/id?1020552 · Nota
• http://securityfocus.com/bid/30363 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10029 · Nota
• https://access.redhat.com/security/cve/CVE-2008-1946 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43993 · Nota
• https://security-tracker.debian.org/tracker/CVE-2008-1946 · Aviso do Fabricante