Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Mon, 06 Jun 2011 17:06:40 +0200
From: Jan Lieskovsky <>
To: Sebastian Krahmer <>
Subject: Re: CVE request: pam_ssh not dropping root gid(s)

Hello, Sebastian,

   thanks for the report.

On 06/06/2011 11:26 AM, Sebastian Krahmer wrote:
> Hi,
> In certain configs, pam_ssh is not completely dropping its privileges
> to user. It just forgets to call setgid() and initgroups(). A fix can be found at [1].
> Can someone assign a CVE?
> thx,
> Sebastian
> [1]

Unfortunately not able to access this entry. Would it be possible to 
make it public? (for further details & CVE assignment). Or will be
access granted per email address approach necessary?

Thank you & Regards, Jan.
Jan iankko Lieskovsky / Red Hat Security Response Team


Powered by blists - more mailing lists

Your e-mail address:

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Powered by Openwall GNU/*/Linux - Powered by OpenVZ