NetBSD 'pam_unix' Root Password Change Local Security Bypass Weakness

Bugtraq ID:	35465
Class:	Access Validation Error
CVE:
Remote:	No
Local:	Yes
Published:	Jun 23 2009 12:00AM
Updated:	Jun 23 2009 05:09PM
Credit:	Thomas Getzke and Hubert Feyrer
Vulnerable:	NetBSD NetBSD 4.0.1 NetBSD NetBSD Current NetBSD NetBSD 5.0 RC3 NetBSD NetBSD 5.0 NetBSD NetBSD 4.1 NetBSD NetBSD 4.0 BETA2 NetBSD NetBSD 4.0 NetBSD NetBSD 4,0_Beta
Not Vulnerable:

NetBSD 'pam_unix' Root Password Change Local Security Bypass Weakness

NetBSD is prone to a local security-bypass weakness because the software fails to properly check permissions when modifying the root password.

Attackers can exploit this issue to modify the root password, which may lead to elevated privileges or aid in further attacks.

NetBSD 'pam_unix' Root Password Change Local Security Bypass Weakness

Attackers can use standard commands to exploit this issue.

NetBSD 'pam_unix' Root Password Change Local Security Bypass Weakness

Solution:
Updates are available. Please see the references for details.

NetBSD 'pam_unix' Root Password Change Local Security Bypass Weakness

References:

• NetBSD Homepage (NetBSD)