Vulnerability Bulletins |
Múltiples vulnerabilidades en el módulo PAM de MIT Kerberos |
|
Vulnerability classification |
|
| Property | Value |
| Confidence level | Oficial |
| Impact | Aumento de privilegios |
| Dificulty | Experto |
| Required attacker level | Acceso remoto con cuenta |
System information |
|
| Property | Value |
| Affected manufacturer | GNU/Linux |
| Affected software | libpam-krb5 < 3.13 |
Description |
|
|
Se han descubierto múltiples vulnerabilidades en libpam-krb5. Las vulnerabilidades son descritas a continuación: - CVE-2009-0360: La vulnerabilidad reside en un error en la inicialización de las librerias de Kerberos para su uso como setuid. Un atacante local podría aumentar privilegios apuntando mediante una variable de entorno a un fichero de configuración Kerberos modificado, y después lanzando la aplicación. - CVE-2009-0361: La vulnerabilidad reside en un error en el manejo de las llamadas a "pam_setcred". Un atacante local podría modificar ficheros arbitrarios mediante la modificación de la variable de entorno "KRB5CCNAME" y después lanzando una aplicación con privilegios de setuid que realiza ciertas operaciones "pam_setcred". |
|
Solution |
|
|
Actualización de software Debian (DSA-1721-1) Debian Linux 4.0 Source http://security.debian.org/pool/updates/main/libp/libpam-krb5/libpam-krb5_2.6-1etch1.dsc http://security.debian.org/pool/updates/main/libp/libpam-krb5/libpam-krb5_2.6.orig.tar.gz http://security.debian.org/pool/updates/main/libp/libpam-krb5/libpam-krb5_2.6-1etch1.diff.gz alpha (DEC Alpha) http://security.debian.org/pool/updates/main/libp/libpam-krb5/libpam-krb5_2.6-1etch1_alpha.deb amd64 (AMD x86_64 (AMD64)) http://security.debian.org/pool/updates/main/libp/libpam-krb5/libpam-krb5_2.6-1etch1_amd64.deb arm (ARM) http://security.debian.org/pool/updates/main/libp/libpam-krb5/libpam-krb5_2.6-1etch1_arm.deb hppa (HP PA RISC) http://security.debian.org/pool/updates/main/libp/libpam-krb5/libpam-krb5_2.6-1etch1_hppa.deb i386 (Intel ia32) http://security.debian.org/pool/updates/main/libp/libpam-krb5/libpam-krb5_2.6-1etch1_i386.deb ia64 (Intel ia64) http://security.debian.org/pool/updates/main/libp/libpam-krb5/libpam-krb5_2.6-1etch1_ia64.deb mips (MIPS (Big Endian)) http://security.debian.org/pool/updates/main/libp/libpam-krb5/libpam-krb5_2.6-1etch1_mips.deb mipsel (MIPS (Little Endian)) http://security.debian.org/pool/updates/main/libp/libpam-krb5/libpam-krb5_2.6-1etch1_mipsel.deb powerpc (PowerPC) http://security.debian.org/pool/updates/main/libp/libpam-krb5/libpam-krb5_2.6-1etch1_powerpc.deb s390 (IBM S/390) http://security.debian.org/pool/updates/main/libp/libpam-krb5/libpam-krb5_2.6-1etch1_s390.deb sparc (Sun SPARC/UltraSPARC) http://security.debian.org/pool/updates/main/libp/libpam-krb5/libpam-krb5_2.6-1etch1_sparc.deb Debian (DSA-1722-1) Debian Linux 4.0 Source http://security.debian.org/pool/updates/main/libp/libpam-heimdal/libpam-heimdal_2.5-1etch1.dsc http://security.debian.org/pool/updates/main/libp/libpam-heimdal/libpam-heimdal_2.5-1etch1.diff.gz http://security.debian.org/pool/updates/main/libp/libpam-heimdal/libpam-heimdal_2.5.orig.tar.gz amd64 (AMD x86_64 (AMD64)) http://security.debian.org/pool/updates/main/libp/libpam-heimdal/libpam-heimdal_2.5-1etch1_amd64.deb arm (ARM) http://security.debian.org/pool/updates/main/libp/libpam-heimdal/libpam-heimdal_2.5-1etch1_arm.deb hppa (HP PA RISC) http://security.debian.org/pool/updates/main/libp/libpam-heimdal/libpam-heimdal_2.5-1etch1_hppa.deb i386 (Intel ia32) http://security.debian.org/pool/updates/main/libp/libpam-heimdal/libpam-heimdal_2.5-1etch1_i386.deb ia64 (Intel ia64) http://security.debian.org/pool/updates/main/libp/libpam-heimdal/libpam-heimdal_2.5-1etch1_ia64.deb mips (MIPS (Big Endian)) http://security.debian.org/pool/updates/main/libp/libpam-heimdal/libpam-heimdal_2.5-1etch1_mips.deb mipsel (MIPS (Little Endian)) http://security.debian.org/pool/updates/main/libp/libpam-heimdal/libpam-heimdal_2.5-1etch1_mipsel.deb powerpc (PowerPC) http://security.debian.org/pool/updates/main/libp/libpam-heimdal/libpam-heimdal_2.5-1etch1_powerpc.deb s390 (IBM S/390) http://security.debian.org/pool/updates/main/libp/libpam-heimdal/libpam-heimdal_2.5-1etch1_s390.deb sparc (Sun SPARC/UltraSPARC) http://security.debian.org/pool/updates/main/libp/libpam-heimdal/libpam-heimdal_2.5-1etch1_sparc.deb Sun(252767) Solaris 8 / SPARC / SEAM / patch 112237-16 y patch 112390-14 o posteriores Solaris 9 / SPARC / patch 112908-34 o posterior Solaris 10 / SPARC / patch 138371-06 o posterior Solaris 8 / x86 / SEAM / patch 112238-15 y patch 112240-13 o posteriores Solaris 9 / x86 / patch 115168-19 o posterior Solaris 10 / x86 / patch 138372-06 o posterior OpenSolaris / upon builds snv_111 o posterior http://sunsolve.sun.com/pub-cgi/show.pl?target=patchpage http://sunsolve.sun.com/pub-cgi/show.pl?target=patchpage Hewlett-Packard HP-UX B.11.11 / PAMKerberos_B.11.11.16_HP-UX_B.11.11_32_64.depot HP-UX B.11.23 / PAMKerberos_C.01.25_HP-UX_B.11.23_IA_PA.depot HP-UX B.11.31 / PAMKerberos_D.01.25_HP-UX_B.11.31_IA_PA.depot http://www.itrc.hp.com/service/patch/mainPage.do |
|
Standar resources |
|
| Property | Value |
| CVE |
CVE-2009-0360 CVE-2009-0361 |
| BID |
33740 33741 |
Other resources |
|
|
Debian Security Advisory (DSA-1721-1) http://lists.debian.org/debian-security-announce/2009/msg00030.html Debian Security Advisory (DSA-1722-1) http://lists.debian.org/debian-security-announce/2009/msg00031.html Sun Alert Notification (252767) http://sunsolve.sun.com/search/document.do?assetkey=1-66-252767-1 HP SECURITY BULLETIN (HPSBUX02415) http://www13.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01690019-1 |
|
Version history |
||
| Version | Comments | Date |
| 1.0 | Aviso emitido | 2009-02-17 |
| 1.1 | Aviso actualizado por Sun (252767) | 2009-03-09 |
| 1.2 | Aviso emitido por HP (HPSBUX02415) | 2009-04-07 |