CVE-2009-3232

pam-auth-update for PAM, as used in Ubuntu 8.10 and 9.4, and Debian GNU/Linux, does not properly handle an "empty selection" for system authentication modules in certain rare configurations, which causes any attempt to be successful and allows remote attackers to bypass authentication.

CVSS v2.0 9.3 HIGH

9.3^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 8.6 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=519927	Issue Tracking Mailing List
http://secunia.com/advisories/36620	Broken Link Vendor Advisory
http://www.openwall.com/lists/oss-security/2009/09/08/7	Mailing List
http://www.securityfocus.com/bid/36306	Broken Link Patch Third Party Advisory VDB Entry
https://launchpad.net/bugs/410171	Issue Tracking Patch
https://usn.ubuntu.com/828-1/	Broken Link

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:canonical:ubuntu_linux:8.10:::::::*
	cpe:2.3:o:canonical:ubuntu_linux:9.04:::::::*

History

No history.

Information

Published : 2009-09-17 10:30

Updated : 2024-02-13 17:42

NVD link : CVE-2009-3232

Mitre link : CVE-2009-3232

CVE.ORG link : CVE-2009-3232

JSON object : View

Products Affected

canonical

ubuntu_linux

CWE

CWE-287

Improper Authentication

{"id": "CVE-2009-3232", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 9.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2009-09-17T10:30:01.250", "references": [{"url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=519927", "tags": ["Issue Tracking", "Mailing List"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/36620", "tags": ["Broken Link", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.openwall.com/lists/oss-security/2009/09/08/7", "tags": ["Mailing List"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/36306", "tags": ["Broken Link", "Patch", "Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "https://launchpad.net/bugs/410171", "tags": ["Issue Tracking", "Patch"], "source": "cve@mitre.org"}, {"url": "https://usn.ubuntu.com/828-1/", "tags": ["Broken Link"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-287"}]}], "descriptions": [{"lang": "en", "value": "pam-auth-update for PAM, as used in Ubuntu 8.10 and 9.4, and Debian GNU/Linux, does not properly handle an \"empty selection\" for system authentication modules in certain rare configurations, which causes any attempt to be successful and allows remote attackers to bypass authentication."}, {"lang": "es", "value": "pam-auth-update para PAM, tal y como se utiliza Ubuntu v8.10 y v9.4, y Debian GNU/Linux, no gestiona adecuadamente una \"selecci\u00f3n vac\u00eda\" para los m\u00f3dulos de autenticacion del sistema en ciertas configuraciones poco frecuentes, lo que lleva a que cualquier intento de autenticaci\u00f3n tenga exito lo que permite a atacantes remotos evitar este paso."}], "lastModified": "2024-02-13T17:42:02.047", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4747CC68-FAF4-482F-929A-9DA6C24CB663"}, {"criteria": "cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}