Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

pam: denial of service

Package(s):

pam

CVE #(s):

CVE-2010-4707

Created:

May 31, 2011

Updated:

June 2, 2011

Description:

From the Ubuntu advisory:

It was discovered that the PAM pam_xauth module incorrectly verified certain file properties. A local attacker could use this flaw to cause a denial of service.

Alerts:

Ubuntu	USN-1140-2	2011-05-31
Ubuntu	USN-1140-1	2011-05-30
Gentoo	201206-31	2012-06-25

(Log in to post comments)