Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Mon, 6 Jun 2011 11:26:57 +0200
From: Sebastian Krahmer <>
Subject: CVE request: pam_ssh not dropping root gid(s)


In certain configs, pam_ssh is not completely dropping its privileges
to user. It just forgets to call setgid() and initgroups(). A fix can be found at [1].
Can someone assign a CVE?




~ perl
~ $_='print"\$_=\47$_\47;eval"';eval
~ - SuSE Security Team

SUSE LINUX Products GmbH, GF: Jeff Hawn, Jennifer Guild, Felix Imendörffer, HRB 16746 (AG Nürnberg)
Maxfeldstraße 5
90409 Nürnberg

Powered by blists - more mailing lists

Your e-mail address:

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Powered by Openwall GNU/*/Linux - Powered by OpenVZ