NVD

Id
30978  
Name
CVE-2014-2583  
Description
Multiple directory traversal vulnerabilities in pam_timestamp.c in the pam_timestamp module for Linux-PAM (aka pam) 1.1.8 allow local users to create arbitrary files or possibly bypass authentication via a .. (dot dot) in the (1) PAM_RUSER value to the get_ruser function or (2) PAM_TTY value to the check_tty function, which is used by the format_timestamp_name function.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-04-10  
Modified Date
2016-12-02  
Seq
2014-2583  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
162881 30978 CVE-2014-2583 [oss-security] 20140324 pam_timestamp internals  View
162882 30978 CVE-2014-2583 [oss-security] 20140326 Re: pam_timestamp internals  View
162883 30978 CVE-2014-2583 [oss-security] 20140331 Re: pam_timestamp internals  View
162884 30978 CVE-2014-2583 66493  View
162885 30978 CVE-2014-2583 USN-2935-1  View
162886 30978 CVE-2014-2583 USN-2935-2  View
162887 30978 CVE-2014-2583 USN-2935-3  View
162888 30978 CVE-2014-2583 https://git.fedorahosted.org/cgit/linux-pam.git/commit/?id=Linux-PAM-1_1_8-32-g9dcead8  View
162889 30978 CVE-2014-2583 GLSA-201605-05  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13092 JVNDB-2014-001967 Linux-PAM 用 pam_timestamp モジュールの pam_timestamp.c におけるディレクトリトラバーサルの脆弱性 Linux-PAM (別名 pam) 用 pam_timestamp モジュールの pam_timestamp.c には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2014-2583 69870 CVE-2014-2583 30978 5.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001967.html 2014-03-26 2014-04-14 View