OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: pam question
From: Andreas Hasenack (andreasCONECTIVA.COM.BR)
Date: Wed Aug 02 2000 - 07:44:57 CDT

Em Mon, Jul 31, 2000 at 07:50:45PM -0400, Vincent Danen escreveu:
> Hi there. I have a question about the security explots in pam that
> Connectiva and RedHat announced. Does anyone know what version the
> exploit first appeared in? Specifically, I'm wondering if versions
> 0.66 and 0.68 are afflicted with this exploit.

pam_console is the affected module. As stated in the advisories, if
you:
- login remotely (X -broadcast) (have gdm, kdm, whatever running
with XDMCP enabled somewhere)
- after login, start Xnest with -broadcast again, for example
- login again, now you will be using display :1
- this is treated as a console user, and commands only available
  to console users can be run, such as reboot.

I have tried this from versions 0.66 through 0.72 (unpatched) and
the problem exists in those.

There is a problem with versioning with this package, though.
The fixed version has the exact same version number as the previous
one, not even a patch: it's just repackaged in the tar ball.
Pristine sources? 

-- 
Andreas Hasenack
andreasconectiva.com.br
  • application/pgp-signature attachment: stored