Multiple Linux Vendor userhelper/PAM Path Vulnerability

Bugtraq ID:	913
Class:	Input Validation Error
CVE:
Remote:	No
Local:	Yes
Published:	Jan 04 2000 12:00AM
Updated:	Jan 04 2000 12:00AM
Credit:	This was posted to Bugtraq in a L0pht security advisory on January 4, 1999.
Vulnerable:	Turbolinux Turbolinux 6.0.2 Turbolinux Turbolinux 4.4 Turbolinux Turbolinux 4.2 Turbolinux Turbolinux 3.5 b2 Redhat Linux 6.1 i386 Redhat Linux 6.0 Mandriva Linux Mandrake 6.1 Mandriva Linux Mandrake 6.0
Not Vulnerable:	Mandriva Linux Mandrake 7.0

Multiple Linux Vendor userhelper/PAM Path Vulnerability

Exploit available:

• /data/vulnerabilities/exploits/pamslam.sh
• /data/vulnerabilities/exploits/mandrake-pam.c

Multiple Linux Vendor userhelper/PAM Path Vulnerability

Solution:
RedHat released the following patches for this problem:

Intel:
ftp://updates.redhat.com/6.1/i386/pam-0.68-10.i386.rpm
ftp://updates.redhat.com/6.1/i386/usermode-1.17-1.i386.rpm

Alpha:
ftp://updates.redhat.com/6.1/alpha/pam-0.68-10.alpha.rpm
ftp://updates.redhat.com/6.1/alpha/usermode-1.17-1.alpha.rpm

Sparc:
ftp://updates.redhat.com/6.1/sparc/pam-0.68-10.sparc.rpm
ftp://updates.redhat.com/6.1/sparc/usermode-1.17-1.sparc.rpm

Source packages:
ftp://updates.redhat.com/6.1/SRPMS/pam-0.68-10.src.rpm
ftp://updates.redhat.com/6.1/SRPMS/usermode-1.17-1.src.rpm

TurboLinux has released patches for this vulnerability. Further information is available at http://www.turbolinux.com/security


Turbolinux Turbolinux 6.0.2

• TurboLinux pam-0.72-3.i386.rpm
  ftp://ftp.turbolinux.com/pub/updates/6.0/security/pam-0.72-3.i386.rpm


• TurboLinux usermode-1.18-1.i386.rpm
  ftp://ftp.turbolinux.com/pub/updates/6.0/security/usermode-1.18-1.i386 .rpm

Multiple Linux Vendor userhelper/PAM Path Vulnerability

References:

• L0pht Heavy Industries Advisories (L0pht Heavy Industries)
  
• Updates, Fixes, and Errata Page (RedHat)