medium4.6Public exploit code
CVE-2003-0388
pam_wheel in Linux-PAM 0.78, with the trust option enabled and the use_uid option disabled, allows local users to spoof log entries and gain privileges by caus…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Linux PAM 0.77 - Pam_Wheel Module 'getlogin() Username' Spoofing Privilege Escalation2003-06-16 · local · linux · Verified
Impact
pam_wheel in Linux-PAM 0.78, with the trust option enabled and the use_uid option disabled, allows local users to spoof log entries and gain privileges by causing getlogin() to return a spoofed user name.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Andrew Morgan | Linux Pam | through 0.77 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=105577915506761&w=2
- http://www.idefense.com/advisory/06.16.03.txt
- http://www.redhat.com/support/errata/RHSA-2004-304.html
- http://marc.info/?l=bugtraq&m=105577915506761&w=2
- http://www.idefense.com/advisory/06.16.03.txt
- http://www.redhat.com/support/errata/RHSA-2004-304.html