BID:16564

PAM-MySQL Code Execution And Denial Of Service Vulnerabilities

Info

PAM-MySQL Code Execution And Denial Of Service Vulnerabilities

Bugtraq ID:	16564
Class:	Unknown
CVE:	CVE-2005-4713 CVE-2006-0056
Remote:	Yes
Local:	Yes
Published:	Feb 09 2006 12:00AM
Updated:	Jul 06 2016 02:40PM
Credit:	The vendor disclosed these issues.
Vulnerable:	pam_mysql pam_mysql 0.4.7 pam_mysql pam_mysql 0.4 pam_mysql pam_mysql 0.3 pam_mysql pam_mysql 0.2 pam_mysql pam_mysql 0.1 pam_mysql pam_mysql 0.7pre2 pam_mysql pam_mysql 0.7pre1 pam_mysql pam_mysql 0.6 pam_mysql pam_mysql 0.5 Gentoo Linux

Not Vulnerable:	pam_mysql pam_mysql 0.6.2 pam_mysql pam_mysql 0.7pre3

Discussion

PAM-MySQL Code Execution And Denial Of Service Vulnerabilities

PAM-MySQL is susceptible to two vulnerabilities:

- a denial-of-service vulnerability in its logging facility
- a double-free vulnerability.

These issues allow local and remote attackers to execute arbitrary machine code in the context of the affected module. Attackers may also crash applications that use the PAM module, denying service to legitimate users. Applications that execute the PAM module with superuser privileges will allow attackers to completely compromise affected computers.

Exploit / POC

PAM-MySQL Code Execution And Denial Of Service Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]

Solution / Fix

PAM-MySQL Code Execution And Denial Of Service Vulnerabilities

Solution:
The vendor has released versions 0.6.2 and 0.7pre3 of the affected package to address these issues.

Please see the referenced vendor advisories for more information.

pam_mysql pam_mysql 0.5