PT-2013-1804 · Gnu+4 · Su+6

Jan Lieskovsky

·

Publicado

2013-02-20

·

Atualizado

2019-04-22

·

CVE-2012-5536

CVSS v2.0

6.2

Média

VetorAV:L/AC:H/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Red Hat Enterprise Linux (RHEL) 6 Fedora Rawhide
Description The issue allows local users to obtain sensitive information from process memory or possibly gain privileges via crafted use of an application that relies on the pam ssh agent auth module, as demonstrated by su and sudo. This occurs because the pam ssh agent auth module calls the glibc error function instead of the error function in the OpenSSH codebase.
Recommendations For Red Hat Enterprise Linux (RHEL) 6, update the pam ssh agent auth module to use the correct error function from the OpenSSH codebase. For Fedora Rawhide, update the pam ssh agent auth module to use the correct error function from the OpenSSH codebase. As a temporary workaround, consider restricting the use of applications that rely on the pam ssh agent auth module, such as su and sudo, until a patch is available.

Exploit

Correção

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CESA-2013_0519
CVE-2012-5536
RHSA-2013:0519
RHSA-2013_0519

Produtos afetados

Centos
Fedora
Openssh
Red Hat
Glibc
Su
Sudo