[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248678

 
 

909

 
 

195426

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

ALAS-2015-589 --- pam

ID: oval:org.secpod.oval:def:1200164Date: (C)2016-01-04   (M)2023-07-28
Class: PATCHFamily: unix




It was discovered that the _unix_run_helper_binary function of PAM"s unix_pam module could write to a blocking pipe, possibly causing the function to become unresponsive. An attacker able to supply large passwords to the unix_pam module could use this flaw to enumerate valid user accounts, or cause a denial of service on the system

Platform:
Amazon Linux AMI
Product:
pam
Reference:
ALAS-2015-589
CVE-2015-3238
CVE    1
CVE-2015-3238
CPE    2
cpe:/a:pam:pam
cpe:/o:amazon:linux

© SecPod Technologies