USN-959-2: PAM vulnerability
25 October 2010
Gain root by following symlinks.
- pam - Pluggable Authentication Modules
USN-959-1 fixed vulnerabilities in PAM. This update provides the
corresponding updates for Ubuntu 10.10.
Original advisory details:
Denis Excoffier discovered that the PAM MOTD module in Ubuntu did
not correctly handle path permissions when creating user file stamps.
A local attacker could exploit this to gain root privilieges.
- USN-959-1: pam, libpam-modules