PT-2019-4758 · Python+2 · Pam-Python+2

Malte Kraus · Published 2019-09-24 · Updated 2023-02-27 · CVE-2019-16729

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions pam-python versions prior to 1.0.7-1

Description The issue is related to insecure privilege management in the pam-python PAM module, which allows an attacker to escalate privileges using a specially crafted binary file with the setuid flag. This can lead to local root escalation in certain PAM setups. The vulnerability is due to the default environment variable handling of Python, which can be manipulated by a local user to gain access with root privileges.

Recommendations For versions prior to 1.0.7-1, update to version 1.0.7-1 or later to resolve the issue. As a temporary workaround, consider restricting access to the pam-python module to minimize the risk of exploitation. Avoid using the default environment variable handling of Python in PAM setups until the issue is resolved.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

ALT-PU-2021-1528

BDU:2020-01330

CVE-2019-16729

DLA-2000-1

DSA-4555-1

USN-4552-1

USN-4552-2

USN-4552-3

Affected Products

Alt Linux

Ubuntu

Pam-Python

References · 26

• https://osv.dev/vulnerability/DSA-4555-1 · Vendor Advisory
• https://usn.ubuntu.com/4552-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-16729 · Vendor Advisory
• https://sourceforge.net/p/pam-python/code/ci/0247ab687b4347cc52859ca461fb0126dd7e2ebe · Patch
• https://ubuntu.com/security/CVE-2019-16729 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4552-2 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2019-16729 · Vendor Advisory
• https://debian.org/security/2019/dsa-4555 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-2000-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-16729 · Security Note
• https://osv.dev/vulnerability/USN-4552-3 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4552-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-01330 · Security Note
• https://osv.dev/vulnerability/CVE-2019-16729 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-16729 · Vendor Advisory