• info
• discussion
• exploit
• solution
• references

Linux-PAM 'pam_env' and 'pam_mail' Modules Multiple Vulnerabilities

Linux-PAM 'pam_env' and 'pam_mail' modules are prone to local privilege-escalation vulnerabilities and a security-bypass vulnerability.

Local attackers may exploit these issues to gain elevated privileges, which can lead to a complete compromise of an affected computer.

Versions prior to Linux-PAM 1.1.2 are vulnerable.