• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Linux PAM Authentication Bypass Vulnerability

Solution:
Debian has made fixes available for their unstable release. It is believed that other releases are not vulnerable.

Fixes available:


Andrew G. Morgan Linux PAM 0.76

• Debian libpam-cracklib_0.76-6_alpha.deb
  Alpha
  http://ftp.debian.org/debian/pool/main/p/pam/libpam-cracklib_0.76-6_al pha.deb


• Debian libpam-cracklib_0.76-6_arm.deb
  ARM
  http://ftp.debian.org/debian/pool/main/p/pam/libpam-cracklib_0.76-6_ar m.deb


• Debian libpam-cracklib_0.76-6_hppa.deb
  HP-PA
  http://ftp.debian.org/debian/pool/main/p/pam/libpam-cracklib_0.76-6_hp pa.deb


• Debian libpam-cracklib_0.76-6_i386.deb
  IA-32
  http://ftp.debian.org/debian/pool/main/p/pam/libpam-cracklib_0.76-6_i3 86.deb


• Debian libpam-cracklib_0.76-6_ia64.deb
  IA-64
  http://ftp.debian.org/debian/pool/main/p/pam/libpam-cracklib_0.76-6_ia 64.deb


• Debian libpam-cracklib_0.76-6_m68k.deb
  m68k
  http://ftp.debian.org/debian/pool/main/p/pam/libpam-cracklib_0.76-6_m6 8k.deb


• Debian libpam-cracklib_0.76-6_mips.deb
  Big Endian MIPS
  http://ftp.debian.org/debian/pool/main/p/pam/libpam-cracklib_0.76-6_mi ps.deb


• Debian libpam-cracklib_0.76-6_mipsel.deb
  Little Endian MIPS
  http://ftp.debian.org/debian/pool/main/p/pam/libpam-cracklib_0.76-6_mi psel.deb


• Debian libpam-cracklib_0.76-6_powerpc.deb
  PowerPC
  http://ftp.debian.org/debian/pool/main/p/pam/libpam-cracklib_0.76-6_po werpc.deb


• Debian libpam-cracklib_0.76-6_s390.deb
  IBM S/390
  http://ftp.debian.org/debian/pool/main/p/pam/libpam-cracklib_0.76-6_s3 90.deb


• Debian libpam-cracklib_0.76-6_sparc.deb
  Sparc
  http://ftp.debian.org/debian/pool/main/p/pam/libpam-cracklib_0.76-6_sp arc.deb


• Debian libpam-doc_0.76-6_all.deb
  Architecture independent
  http://ftp.debian.org/debian/pool/main/p/pam/libpam-doc_0.76-6_all.deb


• Debian libpam-modules_0.76-6_alpha.deb
  Alpha
  http://ftp.debian.org/debian/pool/main/p/pam/libpam-modules_0.76-6_alp ha.deb


• Debian libpam-modules_0.76-6_arm.deb
  ARM
  http://ftp.debian.org/debian/pool/main/p/pam/libpam-modules_0.76-6_arm .deb


• Debian libpam-modules_0.76-6_hppa.deb
  HP-PA
  http://ftp.debian.org/debian/pool/main/p/pam/libpam-modules_0.76-6_hpp a.deb


• Debian libpam-modules_0.76-6_i386.deb
  IA-32
  http://ftp.debian.org/debian/pool/main/p/pam/libpam-modules_0.76-6_i38 6.deb


• Debian libpam-modules_0.76-6_ia64.deb
  IA-64
  http://ftp.debian.org/debian/pool/main/p/pam/libpam-modules_0.76-6_ia6 4.deb


• Debian libpam-modules_0.76-6_m68k.deb
  m68k
  http://ftp.debian.org/debian/pool/main/p/pam/libpam-modules_0.76-6_m68 k.deb


• Debian libpam-modules_0.76-6_mips.deb
  Big Endian MIPS
  http://ftp.debian.org/debian/pool/main/p/pam/libpam-modules_0.76-6_mip s.deb


• Debian libpam-modules_0.76-6_mips.deb
  Little Endian MIPS
  http://ftp.debian.org/debian/pool/main/p/pam/libpam-modules_0.76-6_mip s.deb


• Debian libpam-modules_0.76-6_powerpc.deb
  PowerPC
  http://ftp.debian.org/debian/pool/main/p/pam/libpam-modules_0.76-6_pow erpc.deb


• Debian libpam-modules_0.76-6_s390.deb
  IBM S/390
  http://ftp.debian.org/debian/pool/main/p/pam/libpam-modules_0.76-6_s39 0.deb


• Debian libpam-modules_0.76-6_sparc.deb
  Sparc
  http://ftp.debian.org/debian/pool/main/p/pam/libpam-modules_0.76-6_spa rc.deb


• Debian libpam-runtime_0.76-6_all.deb
  Architecture independent
  http://ftp.debian.org/debian/pool/main/p/pam/libpam-runtime_0.76-6_all .deb


• Debian libpam0g-dev_0.76-6_alpha.deb
  Alpha
  http://ftp.debian.org/debian/pool/main/p/pam/libpam0g-dev_0.76-6_alpha .deb


• Debian libpam0g-dev_0.76-6_arm.deb
  ARM
  http://ftp.debian.org/debian/pool/main/p/pam/libpam0g-dev_0.76-6_arm.d eb


• Debian libpam0g-dev_0.76-6_hppa.deb
  HP-PA
  http://ftp.debian.org/debian/pool/main/p/pam/libpam0g-dev_0.76-6_hppa. deb


• Debian libpam0g-dev_0.76-6_i386.deb
  IA-32
  http://ftp.debian.org/debian/pool/main/p/pam/libpam0g-dev_0.76-6_i386. deb


• Debian libpam0g-dev_0.76-6_ia64.deb
  IA-64
  http://ftp.debian.org/debian/pool/main/p/pam/libpam0g-dev_0.76-6_ia64. deb


• Debian libpam0g-dev_0.76-6_m68k.deb
  m68k
  http://ftp.debian.org/debian/pool/main/p/pam/libpam0g-dev_0.76-6_m68k. deb


• Debian libpam0g-dev_0.76-6_mips.deb
  Big Endian MIPS
  http://ftp.debian.org/debian/pool/main/p/pam/libpam0g-dev_0.76-6_mips. deb


• Debian libpam0g-dev_0.76-6_mipsel.deb
  Little Endian MIPS
  http://ftp.debian.org/debian/pool/main/p/pam/libpam0g-dev_0.76-6_mipse l.deb


• Debian libpam0g-dev_0.76-6_powerpc.deb
  PowerPC
  http://ftp.debian.org/debian/pool/main/p/pam/libpam0g-dev_0.76-6_power pc.deb


• Debian libpam0g-dev_0.76-6_s390.deb
  IBM S/390
  http://ftp.debian.org/debian/pool/main/p/pam/libpam0g-dev_0.76-6_s390. deb


• Debian libpam0g-dev_0.76-6_sparc.deb
  Sparc
  http://ftp.debian.org/debian/pool/main/p/pam/libpam0g-dev_0.76-6_sparc .deb


• Debian libpam0g_0.76-6_alpha.deb
  Alpha
  http://ftp.debian.org/debian/pool/main/p/pam/libpam0g_0.76-6_alpha.deb


• Debian libpam0g_0.76-6_arm.deb
  ARM
  http://ftp.debian.org/debian/pool/main/p/pam/libpam0g_0.76-6_arm.deb


• Debian libpam0g_0.76-6_hppa.deb
  HP-PA
  http://ftp.debian.org/debian/pool/main/p/pam/libpam0g_0.76-6_hppa.deb


• Debian libpam0g_0.76-6_i386.deb
  IA-32
  http://ftp.debian.org/debian/pool/main/p/pam/libpam0g_0.76-6_i386.deb


• Debian libpam0g_0.76-6_ia64.deb
  IA-64
  http://ftp.debian.org/debian/pool/main/p/pam/libpam0g_0.76-6_ia64.deb


• Debian libpam0g_0.76-6_m68k.deb
  m68k
  http://ftp.debian.org/debian/pool/main/p/pam/libpam0g_0.76-6_m68k.deb


• Debian libpam0g_0.76-6_mips.deb
  Big Endian MIPS
  http://ftp.debian.org/debian/pool/main/p/pam/libpam0g_0.76-6_mips.deb


• Debian libpam0g_0.76-6_mipsel.deb
  Little Endian MIPS
  http://ftp.debian.org/debian/pool/main/p/pam/libpam0g_0.76-6_mipsel.de b


• Debian libpam0g_0.76-6_powerpc.deb
  PowerPC
  http://ftp.debian.org/debian/pool/main/p/pam/libpam0g_0.76-6_powerpc.d eb


• Debian libpam0g_0.76-6_s390.deb
  IBM S/390
  http://ftp.debian.org/debian/pool/main/p/pam/libpam0g_0.76-6_s390.deb


• Debian libpam0g_0.76-6_sparc.deb
  Sparc
  http://ftp.debian.org/debian/pool/main/p/pam/libpam0g_0.76-6_sparc.deb


• Debian pam_0.76-6.diff.gz
  Source
  http://ftp.debian.org/debian/pool/main/p/pam/pam_0.76-6.diff.gz


• Debian pam_0.76-6.dsc
  Source
  http://ftp.debian.org/debian/pool/main/p/pam/pam_0.76-6.dsc


• Debian pam_0.76.orig.tar.gz
  Source
  http://ftp.debian.org/debian/pool/main/p/pam/pam_0.76.orig.tar.gz