NVD

Id
83507  
Name
CVE-2017-6967  
Description
xrdp 0.9.1 calls the PAM function auth_start_session() in an incorrect location, leading to PAM session modules not being properly initialized, with a potential consequence of incorrect configurations or elevation of privileges, aka a pam_limits.so bypass.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-03-29  
Published
2017-03-17  
Modified Date
2017-03-21  
Seq
2017-6967  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
410342 83507 CVE-2016-5038 [oss-security] 20160524 CVE request: Multiple vunerabilities in libdwarf & dwarfdump  View
410343 83507 CVE-2016-5038 [oss-security] 20160524 Re: CVE request: Multiple vunerabilities in libdwarf & dwarfdump  View
410344 83507 CVE-2016-5038 https://www.prevanders.net/dwarfbug.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
66105 JVNDB-2017-002444 xrdp における脆弱性 xrdp は、PAM 関数 auth_start_session() を不正な位置に呼び出すため、不正な設定をされる、または権限を昇格される脆弱性が存在します。 CVE-2017-6967 CVE-2017-6967 83507 7.5 7.3 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-002444.html 2017-03-15 2017-04-14 View