NVD

Id
78582  
Name
CVE-2001-1147  
Description
The PAM implementation in /bin/login of the util-linux package before 2.11 causes a password entry to be rewritten across multiple PAM calls, which could provide the credentials of one user to a different user, when used in certain PAM modules such as pam_limits.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-05  
Published
2001-10-08  
Modified Date
2008-09-05  
Seq
2001-1147  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
392772 78582 CVE-2001-1147 M-009  View
392773 78582 CVE-2001-1147 utillinux-pamlimits-gain-privileges(7266)  View
392774 78582 CVE-2001-1147 MDKSA-2001:084  View
392775 78582 CVE-2001-1147 SuSE-SA:2001:034  View
392776 78582 CVE-2001-1147 RHSA-2001:132  View
392777 78582 CVE-2001-1147 20011008 pam_limits.so Bug!!  View
392778 78582 CVE-2001-1147 3415  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
64177 JVNDB-2001-000151 util-linux パッケージの PAM における権限昇格の脆弱性 utl-linux パッケージにおいて、 PAM の実装に問題があるため、ユーザが特定のグループに属している場合、root 権限でログインできる脆弱性が存在します。 CVE-2001-1147 3951 CVE-2001-1147 78582 7.2 http://jvndb.jvn.jp/ja/contents/2001/JVNDB-2001-000151.html 2001-10-09 2007-04-01 View