PAM MOTD Module Local Privilege Escalation Vulnerability

Bugtraq ID:	41465
Class:	Access Validation Error
CVE:	CVE-2010-0832
Remote:	No
Local:	Yes
Published:	Jul 07 2010 12:00AM
Updated:	Oct 25 2010 06:48PM
Credit:	Denis Excoffier
Vulnerable:	Ubuntu Ubuntu Linux 9.10 sparc Ubuntu Ubuntu Linux 9.10 powerpc Ubuntu Ubuntu Linux 9.10 lpia Ubuntu Ubuntu Linux 9.10 i386 Ubuntu Ubuntu Linux 9.10 amd64 Ubuntu Ubuntu Linux 10.10 powerpc Ubuntu Ubuntu Linux 10.10 i386 Ubuntu Ubuntu Linux 10.10 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 amd64
Not Vulnerable:

PAM MOTD Module Local Privilege Escalation Vulnerability

PAM is prone to a local privilege-escalation vulnerability.

Attackers can exploit this issue to gain escalated privileges.

PAM MOTD Module Local Privilege Escalation Vulnerability

An attacker can use readily available commands to exploit the issue.

The following exploit is available:

• /data/vulnerabilities/exploits/41465.sh

PAM MOTD Module Local Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references for more information.


Ubuntu Ubuntu Linux 9.10 sparc

• Ubuntu libpam-runtime_1.1.0-2ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/pam/libpam-runtime_1.1.0 -2ubuntu1.1_all.deb


• Ubuntu libpam0g_1.1.0-2ubuntu1.1_sparc.deb
  http://ports.ubuntu.com/pool/main/p/pam/libpam0g_1.1.0-2ubuntu1.1_spar c.deb


• Ubuntu libpam-doc_1.1.0-2ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/pam/libpam-doc_1.1.0-2ub untu1.1_all.deb


• Ubuntu libpam0g-dev_1.1.0-2ubuntu1.1_sparc.deb
  http://ports.ubuntu.com/pool/main/p/pam/libpam0g-dev_1.1.0-2ubuntu1.1_ sparc.deb


• Ubuntu libpam-modules_1.1.0-2ubuntu1.1_sparc.deb
  http://ports.ubuntu.com/pool/main/p/pam/libpam-modules_1.1.0-2ubuntu1. 1_sparc.deb


• Ubuntu libpam-cracklib_1.1.0-2ubuntu1.1_sparc.deb
  http://ports.ubuntu.com/pool/main/p/pam/libpam-cracklib_1.1.0-2ubuntu1 .1_sparc.deb

Ubuntu Ubuntu Linux 10.10 amd64

• Ubuntu libpam-doc_1.1.1-4ubuntu2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/pam/libpam-doc_1.1.1-4ub untu2_all.deb


• Ubuntu libpam0g_1.1.1-4ubuntu2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/pam/libpam0g_1.1.1-4ubun tu2_amd64.deb


• Ubuntu libpam-modules_1.1.1-4ubuntu2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/pam/libpam-modules_1.1.1 -4ubuntu2_amd64.deb


• Ubuntu libpam0g-dev_1.1.1-4ubuntu2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/pam/libpam0g-dev_1.1.1-4 ubuntu2_amd64.deb


• Ubuntu libpam-cracklib_1.1.1-4ubuntu2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/pam/libpam-cracklib_1.1. 1-4ubuntu2_amd64.deb


• Ubuntu libpam-runtime_1.1.1-4ubuntu2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/pam/libpam-runtime_1.1.1 -4ubuntu2_all.deb

Ubuntu Ubuntu Linux 10.04 powerpc

• Ubuntu libpam-cracklib_1.1.1-2ubuntu5_powerpc.deb
  http://ports.ubuntu.com/pool/main/p/pam/libpam-cracklib_1.1.1-2ubuntu5 _powerpc.deb


• Ubuntu libpam-doc_1.1.1-2ubuntu5_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/pam/libpam-doc_1.1.1-2ub untu5_all.deb


• Ubuntu libpam0g_1.1.1-2ubuntu5_powerpc.deb
  http://ports.ubuntu.com/pool/main/p/pam/libpam0g_1.1.1-2ubuntu5_powerp c.deb


• Ubuntu libpam0g-dev_1.1.1-2ubuntu5_powerpc.deb
  http://ports.ubuntu.com/pool/main/p/pam/libpam0g-dev_1.1.1-2ubuntu5_po werpc.deb


• Ubuntu libpam-runtime_1.1.1-2ubuntu5_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/pam/libpam-runtime_1.1.1 -2ubuntu5_all.deb


• Ubuntu libpam-modules_1.1.1-2ubuntu5_powerpc.deb
  http://ports.ubuntu.com/pool/main/p/pam/libpam-modules_1.1.1-2ubuntu5_ powerpc.deb

Ubuntu Ubuntu Linux 10.10 i386

• Ubuntu libpam-modules_1.1.1-4ubuntu2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/pam/libpam-modules_1.1.1 -4ubuntu2_i386.deb


• Ubuntu libpam0g_1.1.1-4ubuntu2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/pam/libpam0g_1.1.1-4ubun tu2_i386.deb


• Ubuntu libpam-runtime_1.1.1-4ubuntu2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/pam/libpam-runtime_1.1.1 -4ubuntu2_all.deb


• Ubuntu libpam0g-dev_1.1.1-4ubuntu2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/pam/libpam0g-dev_1.1.1-4 ubuntu2_i386.deb


• Ubuntu libpam-doc_1.1.1-4ubuntu2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/pam/libpam-doc_1.1.1-4ub untu2_all.deb


• Ubuntu libpam-cracklib_1.1.1-4ubuntu2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/pam/libpam-cracklib_1.1. 1-4ubuntu2_i386.deb

Ubuntu Ubuntu Linux 9.10 lpia

• Ubuntu libpam0g_1.1.0-2ubuntu1.1_lpia.deb
  http://ports.ubuntu.com/pool/main/p/pam/libpam0g_1.1.0-2ubuntu1.1_lpia .deb


• Ubuntu libpam-doc_1.1.0-2ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/pam/libpam-doc_1.1.0-2ub untu1.1_all.deb


• Ubuntu libpam-cracklib_1.1.0-2ubuntu1.1_lpia.deb
  http://ports.ubuntu.com/pool/main/p/pam/libpam-cracklib_1.1.0-2ubuntu1 .1_lpia.deb


• Ubuntu libpam-runtime_1.1.0-2ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/pam/libpam-runtime_1.1.0 -2ubuntu1.1_all.deb


• Ubuntu libpam-modules_1.1.0-2ubuntu1.1_lpia.deb
  http://ports.ubuntu.com/pool/main/p/pam/libpam-modules_1.1.0-2ubuntu1. 1_lpia.deb


• Ubuntu libpam0g-dev_1.1.0-2ubuntu1.1_lpia.deb
  http://ports.ubuntu.com/pool/main/p/pam/libpam0g-dev_1.1.0-2ubuntu1.1_ lpia.deb

Ubuntu Ubuntu Linux 9.10 i386

• Ubuntu libpam-doc_1.1.0-2ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/pam/libpam-doc_1.1.0-2ub untu1.1_all.deb


• Ubuntu libpam-cracklib_1.1.0-2ubuntu1.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/pam/libpam-cracklib_1.1. 0-2ubuntu1.1_i386.deb


• Ubuntu libpam-modules_1.1.0-2ubuntu1.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/pam/libpam-modules_1.1.0 -2ubuntu1.1_i386.deb


• Ubuntu libpam0g_1.1.0-2ubuntu1.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/pam/libpam0g_1.1.0-2ubun tu1.1_i386.deb


• Ubuntu libpam-runtime_1.1.0-2ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/pam/libpam-runtime_1.1.0 -2ubuntu1.1_all.deb


• Ubuntu libpam0g-dev_1.1.0-2ubuntu1.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/pam/libpam0g-dev_1.1.0-2 ubuntu1.1_i386.deb

Ubuntu Ubuntu Linux 10.04 amd64

• Ubuntu libpam-doc_1.1.1-2ubuntu5_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/pam/libpam-doc_1.1.1-2ub untu5_all.deb


• Ubuntu libpam0g_1.1.1-2ubuntu5_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/pam/libpam0g_1.1.1-2ubun tu5_amd64.deb


• Ubuntu libpam-cracklib_1.1.1-2ubuntu5_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/pam/libpam-cracklib_1.1. 1-2ubuntu5_amd64.deb


• Ubuntu libpam0g-dev_1.1.1-2ubuntu5_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/pam/libpam0g-dev_1.1.1-2 ubuntu5_amd64.deb


• Ubuntu libpam-runtime_1.1.1-2ubuntu5_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/pam/libpam-runtime_1.1.1 -2ubuntu5_all.deb


• Ubuntu libpam-modules_1.1.1-2ubuntu5_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/pam/libpam-modules_1.1.1 -2ubuntu5_amd64.deb

Ubuntu Ubuntu Linux 10.10 powerpc

• Ubuntu libpam-doc_1.1.1-4ubuntu2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/pam/libpam-doc_1.1.1-4ub untu2_all.deb


• Ubuntu libpam0g-dev_1.1.1-4ubuntu2_powerpc.deb
  http://ports.ubuntu.com/pool/main/p/pam/libpam0g-dev_1.1.1-4ubuntu2_po werpc.deb


• Ubuntu libpam-cracklib_1.1.1-4ubuntu2_powerpc.deb
  http://ports.ubuntu.com/pool/main/p/pam/libpam-cracklib_1.1.1-4ubuntu2 _powerpc.deb


• Ubuntu libpam0g_1.1.1-4ubuntu2_powerpc.deb
  http://ports.ubuntu.com/pool/main/p/pam/libpam0g_1.1.1-4ubuntu2_powerp c.deb


• Ubuntu libpam-runtime_1.1.1-4ubuntu2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/pam/libpam-runtime_1.1.1 -4ubuntu2_all.deb


• Ubuntu libpam-modules_1.1.1-4ubuntu2_powerpc.deb
  http://ports.ubuntu.com/pool/main/p/pam/libpam-modules_1.1.1-4ubuntu2_ powerpc.deb

Ubuntu Ubuntu Linux 10.04 sparc

• Ubuntu libpam-doc_1.1.1-2ubuntu5_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/pam/libpam-doc_1.1.1-2ub untu5_all.deb


• Ubuntu libpam-cracklib_1.1.1-2ubuntu5_sparc.deb
  http://ports.ubuntu.com/pool/main/p/pam/libpam-cracklib_1.1.1-2ubuntu5 _sparc.deb


• Ubuntu libpam0g_1.1.1-2ubuntu5_sparc.deb
  http://ports.ubuntu.com/pool/main/p/pam/libpam0g_1.1.1-2ubuntu5_sparc. deb


• Ubuntu libpam0g-dev_1.1.1-2ubuntu5_sparc.deb
  http://ports.ubuntu.com/pool/main/p/pam/libpam0g-dev_1.1.1-2ubuntu5_sp arc.deb


• Ubuntu libpam-runtime_1.1.1-2ubuntu5_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/pam/libpam-runtime_1.1.1 -2ubuntu5_all.deb


• Ubuntu libpam-modules_1.1.1-2ubuntu5_sparc.deb
  http://ports.ubuntu.com/pool/main/p/pam/libpam-modules_1.1.1-2ubuntu5_ sparc.deb

Ubuntu Ubuntu Linux 10.04 i386

• Ubuntu libpam0g-dev_1.1.1-2ubuntu5_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/pam/libpam0g-dev_1.1.1-2 ubuntu5_i386.deb


• Ubuntu libpam-cracklib_1.1.1-2ubuntu5_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/pam/libpam-cracklib_1.1. 1-2ubuntu5_i386.deb


• Ubuntu libpam-modules_1.1.1-2ubuntu5_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/pam/libpam-modules_1.1.1 -2ubuntu5_i386.deb


• Ubuntu libpam-doc_1.1.1-2ubuntu5_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/pam/libpam-doc_1.1.1-2ub untu5_all.deb


• Ubuntu libpam-runtime_1.1.1-2ubuntu5_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/pam/libpam-runtime_1.1.1 -2ubuntu5_all.deb


• Ubuntu libpam0g_1.1.1-2ubuntu5_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/pam/libpam0g_1.1.1-2ubun tu5_i386.deb

Ubuntu Ubuntu Linux 9.10 powerpc

• Ubuntu libpam-doc_1.1.0-2ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/pam/libpam-doc_1.1.0-2ub untu1.1_all.deb


• Ubuntu libpam-runtime_1.1.0-2ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/pam/libpam-runtime_1.1.0 -2ubuntu1.1_all.deb


• Ubuntu libpam-cracklib_1.1.0-2ubuntu1.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/p/pam/libpam-cracklib_1.1.0-2ubuntu1 .1_powerpc.deb


• Ubuntu libpam0g_1.1.0-2ubuntu1.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/p/pam/libpam0g_1.1.0-2ubuntu1.1_powe rpc.deb


• Ubuntu libpam0g-dev_1.1.0-2ubuntu1.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/p/pam/libpam0g-dev_1.1.0-2ubuntu1.1_ powerpc.deb


• Ubuntu libpam-modules_1.1.0-2ubuntu1.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/p/pam/libpam-modules_1.1.0-2ubuntu1. 1_powerpc.deb

Ubuntu Ubuntu Linux 9.10 amd64

• Ubuntu libpam-modules_1.1.0-2ubuntu1.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/pam/libpam-modules_1.1.0 -2ubuntu1.1_amd64.deb


• Ubuntu libpam-doc_1.1.0-2ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/pam/libpam-doc_1.1.0-2ub untu1.1_all.deb


• Ubuntu libpam0g_1.1.0-2ubuntu1.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/pam/libpam0g_1.1.0-2ubun tu1.1_amd64.deb


• Ubuntu libpam-runtime_1.1.0-2ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/pam/libpam-runtime_1.1.0 -2ubuntu1.1_all.deb


• Ubuntu libpam0g-dev_1.1.0-2ubuntu1.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/pam/libpam0g-dev_1.1.0-2 ubuntu1.1_amd64.deb


• Ubuntu libpam-cracklib_1.1.0-2ubuntu1.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/pam/libpam-cracklib_1.1. 0-2ubuntu1.1_amd64.deb

PAM MOTD Module Local Privilege Escalation Vulnerability

References:

• Ubuntu Homepage (Ubuntu)