/bin/login DoS remains after DSA-1709

2009.01.24
Credit: Paul Szabo
Risk: Medium
Local: Yes
Remote: No
CVE: N/A
CWE: N/A

Even after DSA-1709, /bin/login in Debian is vulnerable to a local DoS attack; the attacker does not need special privileges to succeed. For details please see http://www.debian.org/security/2009/dsa-1709 http://bugs.debian.org/505271 http://bugs.debian.org/505071 I do not know what practical uses this DoS could have. (Debian and Ubuntu are vulnerable, I believe RedHat is not. I do not know about other distros.) Cheers, Paul Szabo psz@maths.usyd.edu.au http://www.maths.usyd.edu.au/u/psz/ School of Mathematics and Statistics University of Sydney Australia

References:

http://seclists.org/fulldisclosure/2009/Jan/0901.html


See this note in RAW Version
Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}
Copyright 2024, cxsecurity.com

 

Back to Top