Published: 06/05/2016 Updated: 05/04/2021

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 890

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

The pam_sm_authenticate function in pam_sshauth.c in libpam-sshauth might allow context-dependent malicious users to bypass authentication or gain privileges via a system user account.

Vulnerable Product	Search on Vulmon	Subscribe to Product
libpam-sshauth project libpam-sshauth -
debian debian linux 8.0

It was discovered that libpam-sshauth, a PAM module to authenticate using an SSH server, does not correctly handle system users In certain configurations an attacker can take advantage of this flaw to gain root privileges For the stable distribution (jessie), this problem has been fixed in version 031-1+deb8u1 For the testing distribution (str ...

CWE-287 https://bazaar.launchpad.net/~ltsp-upstream/ltsp/libpam-sshauth/revision/114#src/pam_sshauth.c http://www.debian.org/security/2016/dsa-3567 https://nvd.nist.gov https://www.debian.org/security/./dsa-3567

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2016-4422

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect