CVE-2012-1502

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• PyPAM Python bindings for PAM - Double-Free Corruption2012-03-10 · dos · linux

Impact

Double free vulnerability in the PyPAM_conv in PAMmodule.c in PyPam 0.5.0 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a NULL byte in a password string.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://lists.opensuse.org/opensuse-updates/2012-04/msg00027.html
• http://secunia.com/advisories/48312
• http://secunia.com/advisories/48332
• http://secunia.com/advisories/48746
• http://ubuntu.com/usn/usn-1395-1
• http://www.debian.org/security/2012/dsa-2430
• http://www.lsexperts.de/advisories/lse-2012-03-01.txt
• http://www.osvdb.org/79892
• https://exchange.xforce.ibmcloud.com/vulnerabilities/73857
• https://security.gentoo.org/glsa/201507-09
• http://lists.opensuse.org/opensuse-updates/2012-04/msg00027.html
• http://secunia.com/advisories/48312
• http://secunia.com/advisories/48332
• http://secunia.com/advisories/48746
• http://ubuntu.com/usn/usn-1395-1
• http://www.debian.org/security/2012/dsa-2430
• http://www.lsexperts.de/advisories/lse-2012-03-01.txt
• http://www.osvdb.org/79892
• https://exchange.xforce.ibmcloud.com/vulnerabilities/73857
• https://security.gentoo.org/glsa/201507-09