Linux-PAM 'pam_xauth' Module Denial of Service and Security Bypass Vulnerabilities

Bugtraq ID:	46045
Class:	Unknown
CVE:	CVE-2010-4706 CVE-2010-4707
Remote:	No
Local:	Yes
Published:	Jan 27 2011 12:00AM
Updated:	Nov 14 2014 12:02AM
Credit:	Dmitry V. Levin
Vulnerable:	Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 11.04 powerpc Ubuntu Ubuntu Linux 11.04 i386 Ubuntu Ubuntu Linux 11.04 ARM Ubuntu Ubuntu Linux 11.04 amd64 Ubuntu Ubuntu Linux 10.10 powerpc Ubuntu Ubuntu Linux 10.10 i386 Ubuntu Ubuntu Linux 10.10 ARM Ubuntu Ubuntu Linux 10.10 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 Pardus Linux 2009 0 Linux-PAM Linux-PAM 1.0.4 Linux-PAM Linux-PAM 1.0.3 Linux-PAM Linux-PAM 1.1.2 Linux-PAM Linux-PAM 1.1.1 Gentoo Linux
Not Vulnerable:

Linux-PAM 'pam_xauth' Module Denial of Service and Security Bypass Vulnerabilities

Linux-PAM 'pam_xauth' module is prone to denial-of-service and security-bypass vulnerabilities.

Local attackers may exploit these issues to bypass certain security restrictions or to cause denial-of-service conditions.

Linux-PAM 1.1.2 and prior versions are vulnerable.

Linux-PAM 'pam_xauth' Module Denial of Service and Security Bypass Vulnerabilities

Attackers can use readily available tools to exploit these issues.

Linux-PAM 'pam_xauth' Module Denial of Service and Security Bypass Vulnerabilities

Solution:
Updates are available. Please see the references for more information.

Linux-PAM 'pam_xauth' Module Denial of Service and Security Bypass Vulnerabilities

References:

• GIT Commit (Dmitry V. Levin)
  
• GIT Commit (Dmitry V. Levin)
  
• Minor security flaw with pam_xauth (Dmitry V. Levin)