CVE

Id
52966  
CVE No.
CVE-2011-5054  
Status
Candidate  
Description
kcheckpass passes a user-supplied argument to the pam_start function, often within a setuid environment, which allows local users to invoke any configured PAM stack, and possibly trigger unintended side effects, via an arbitrary valid PAM service name, a different vulnerability than CVE-2011-4122. NOTE: the vendor indicates that the possibility of resultant privilege escalation may be "a bit far-fetched."  
Phase
Assigned (20120106)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
561256 52966 CVE-2011-5054 MLIST:[oss-security] 20111207 Disputing CVE-2011-4122  View
561257 52966 CVE-2011-5054 URL:http://openwall.com/lists/oss-security/2011/12/07/3  View
561258 52966 CVE-2011-5054 MLIST:[oss-security] 20111208 Re: Disputing CVE-2011-4122  View
561259 52966 CVE-2011-5054 URL:http://openwall.com/lists/oss-security/2011/12/08/9  View
561260 52966 CVE-2011-5054 MLIST:[oss-security] 20111224 Re: Disputing CVE-2011-4122  View
561261 52966 CVE-2011-5054 URL:http://openwall.com/lists/oss-security/2011/12/23/8  View
561262 52966 CVE-2011-5054 MLIST:[oss-security] 20111226 Re: Disputing CVE-2011-4122  View
561263 52966 CVE-2011-5054 URL:http://openwall.com/lists/oss-security/2011/12/27/1  View
561264 52966 CVE-2011-5054 MLIST:[oss-security] 20111228 Re: Disputing CVE-2011-4122  View
561265 52966 CVE-2011-5054 URL:http://openwall.com/lists/oss-security/2011/12/28/5  View
561266 52966 CVE-2011-5054 MLIST:[oss-security] 20111228 Re: Disputing CVE-2011-4122  View
561267 52966 CVE-2011-5054 URL:http://openwall.com/lists/oss-security/2011/12/27/3  View
561268 52966 CVE-2011-5054 MLIST:[oss-security] 20120102 Re: Disputing CVE-2011-4122  View
561269 52966 CVE-2011-5054 URL:http://openwall.com/lists/oss-security/2012/01/02/11  View
561270 52966 CVE-2011-5054 MLIST:[oss-security] 20120102 Re: Disputing CVE-2011-4122  View
561271 52966 CVE-2011-5054 URL:http://openwall.com/lists/oss-security/2012/01/02/10  View
561272 52966 CVE-2011-5054 MISC:http://c-skills.blogspot.com/2011/11/openpam-trickery.html  View
561273 52966 CVE-2011-5054 XF:kcheckpass-pamstart-priv-esc(72230)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
25343 JVNDB-2012-001050 Final Draft におけるスタックベースのバッファオーバーフローの脆弱性 Final Draft には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2011-5059 52966 10 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001050.html  View