Security Advisory

CVE-2011-4122

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2011-11-17 19:00:00

Last updated 2024-08-07 00:01:50

Assigner redhat

CVSS score not scored

State PUBLISHED

Description

Directory traversal vulnerability in openpam_configure.c in OpenPAM before r478 on FreeBSD 8.1 allows local users to load arbitrary DSOs and gain privileges via a .. (dot dot) in the service_name argument to the pam_start function, as demonstrated by a .. in the -c option to kcheckpass.

← Browse all CVEs View on cve.org ↗