PT-2014-4793 · Linux+3 · Linux-Pam+3

Sebastian Krahmer · Published 2014-04-10 · Updated 2024-06-15 · CVE-2014-2583

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Linux-PAM version 1.1.8

Description The issue concerns multiple directory traversal vulnerabilities in the pam timestamp module. These vulnerabilities allow local users to create arbitrary files or possibly bypass authentication. This can be achieved by including a .. (dot dot) in the PAM RUSER value to the get ruser function or the PAM TTY value to the check tty function, which is used by the format timestamp name function.

Recommendations For Linux-PAM version 1.1.8, consider restricting the use of the pam timestamp module until a patch is available. As a temporary workaround, restrict access to the get ruser and check tty functions to minimize the risk of exploitation. Avoid using the PAM RUSER and PAM TTY values in sensitive operations until the issue is resolved.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

ALT-PU-2016-1613

CVE-2014-2583

MGASA-2015-0213

OPENSUSE-SU-2024:10405-1

SUSE-SU-2014_0631-1

USN-2935-1

USN-2935-2

Affected Products

Alt Linux

Linux-Pam

Suse

Ubuntu

References · 50

• 🔥 https://git.fedorahosted.org/cgit/linux-pam.git/commit/?id=Linux-PAM-1_1_8-32-g9dcead8 · Exploit
• https://osv.dev/vulnerability/CVE-2014-2583 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2014-2583 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3238 · Security Note
• http://secunia.com/advisories/57317 · Vendor Advisory
• http://ubuntu.com/usn/USN-2935-1 · Vendor Advisory
• http://ubuntu.com/usn/USN-2935-3 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-2935-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-2583 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2015-0213 · Vendor Advisory
• https://security.gentoo.org/glsa/201605-05 · Vendor Advisory
• https://ubuntu.com/security/CVE-2014-2583 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-2935-2 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2014-2583 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2016-1613 · Vendor Advisory