CVE-2000-0843 Buffer overflow in pam_smb and pam_ntdom pluggable authentication modules (PAM) allow remote attackers to execute arbitrary commands via a login with a long user name.
HighCVSS 10.0
EPSS 6.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in pam_smb and pam_ntdom pluggable authentication modules (PAM) allow remote attackers to execute arbitrary commands via a login with a long user name.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dave airlie pam smb | = 1.1.5 | No fix listed |
| luke kenneth casson leighton pam ntdom | = 0.23 | No fix listed |
References
- 20000910 (SRADV00002) Remote root compromise through pam_smb and pam_ntdom mailing-list
- 20000911 Conectiva Linux Security Announcement - pam_smb mailing-list
- 20000911 libpam-smb: remote root exploit patch vendor-advisory
- MDKSA-2000:047 vendor-advisory
- 20000913 pam_smb remotely exploitable buffer overflow vendor-advisory
- 1666 patch vdb-entry vendor-advisory