NVD

Id
9837  
Name
CVE-2011-3148  
Description
Stack-based buffer overflow in the _assemble_line function in modules/pam_env/pam_env.c in Linux-PAM (aka pam) before 1.1.5 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long string of white spaces at the beginning of the ~/.pam_environment file.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2012-07-22  
Modified Date
2014-03-05  
Seq
2011-3148  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
56446 9837 CVE-2011-3148 http://git.fedorahosted.org/git/?p=linux-pam.git;a=commitdiff;h=caf5e7f61c8d9288daa49b4f61962e6b1239121d  View
56447 9837 CVE-2011-3148 GLSA-201206-31  View
56448 9837 CVE-2011-3148 USN-1237-1  View
56449 9837 CVE-2011-3148 https://bugs.launchpad.net/ubuntu/+source/pam/+bug/874469  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27564 JVNDB-2012-003271 Linux-PAM の modules/pam_env/pam_env.c におけるスタックベースのバッファオーバーフローの脆弱性 Linux-PAM の modules/pam_env/pam_env.c 内の _assemble_line 関数には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2011-3148 51055 CVE-2011-3148 9837 4.6 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003271.html 2012-07-22 2012-07-24 View