PT-2008-3973 · Unknown · Libpam-Pgsql

Julian Mehnle · Published 2008-06-03 · Updated 2017-08-08 · CVE-2008-2516

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions libpam-pgsql version 0.6.3

Description The issue arises from the pam sm authenticate function in pam pgsql.c, which does not correctly evaluate the success of a pam get pass function call due to operator precedence. This allows local users to gain privileges by sending a SIGINT signal while the pam get pass function is executing. An example of this is when a user presses CTRL-C at a sudo password prompt in a specific configuration.

Recommendations For libpam-pgsql version 0.6.3, consider updating to a newer version that addresses this issue, as the current version does not properly handle the SIGINT signal during the execution of the pam get pass function. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2008-2516

Affected Products

Libpam-Pgsql

References · 8

• http://secunia.com/advisories/30391 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-2516 · Security Note
• http://sourceforge.net/project/shownotes.php?release_id=601775 · Note
• http://vupen.com/english/advisories/2008/1654/references · Note
• http://securityfocus.com/bid/29360 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42653 · Note
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=481970 · Note
• http://securitytracker.com/id?1020111 · Note