Gentoo Linux Security Advisory 201507-9 - A double free vulnerability in PyPAM could result in execution of arbitrary code or Denial of Service. Versions less than 0.5.0-r3 are affected.
60e9017808fbb14b2fd98b5951a4999a25a4d14a8178fbf8738bb09e5ec0c8c5Debian Linux Security Advisory 2430-1 - Markus Vervier discovered a double free in the Python interface to the PAM library, which could lead to denial of service.
2ec19710b14c960757a18298629a4fe146967600a1a940c36e3ec21bbea87f71By supplying a NULL-byte to the PyPAM module, a double-free condition is triggered. This condition may allow for remote code execution. Proof of concept included.
b9936d838bd10ba319a3a27d9876c6d69526d361baacacbc111fa9967983d80dUbuntu Security Notice 1395-1 - Markus Vervier discovered that PyPAM incorrectly handled passwords containing NULL bytes. An attacker could exploit this to cause applications using PyPAM to crash, or possibly execute arbitrary code.
b1a8fc445877f4268bbbc0f2331533ede115fc8cdd1e6992f189e0cbec286da4
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed