PT-2003-1054 · Linux Pam · Pam+1

Published 2003-02-07 · Updated 2016-10-18 · CVE-2002-1160

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions pam xauth module (affected versions not specified) pam versions 0.75

Description The issue allows local users to potentially gain root privileges by exploiting the default configuration of the pam xauth module, which forwards MIT-Magic-Cookies to new X sessions. This could be achieved by stealing the cookies from a temporary .xauth file created with the original user's credentials after root uses su. The vulnerability may lead to a breach of confidentiality, integrity, and availability of protected information and can be exploited locally.

Recommendations For pam version 0.75, consider reconfiguring the pam xauth module to prevent the forwarding of MIT-Magic-Cookies to new X sessions as a temporary workaround. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

BDU:2015-07822

BDU:2015-07823

CVE-2002-1160

Affected Products

Pam

Pam Xauth

References · 13

• http://redhat.com/support/errata/RHSA-2003-035.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-07823 · Security Note
• https://bdu.fstec.ru/vul/2015-07822 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2002-1160 · Security Note
• http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/55760 · Vendor Advisory
• http://iss.net/security_center/static/11254.php · Vendor Advisory
• http://mandrakesoft.com/security/advisories?name=MDKSA-2003:017 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2003-028.html · Vendor Advisory
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000693 · Vendor Advisory
• http://kb.cert.org/vuls/id/911505 · Note
• https://rhn.redhat.com/errata/RHSA-2003-035.html · Note
• http://securityfocus.com/bid/6753 · Note
• http://marc.info/?l=bugtraq&m=104431622818954&w=2 · Note