CVE-1999-1346: High severity redhat Linux vulnerability
PAM configuration file for rlogin in Red Hat Linux 6.1 and earlier includes a less restrictive rule before a more restrictive one, which allows users to access the host via rlogin even if rlogin has been explicitly disabled using the /etc/nologin file.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Edit /etc/pam.d/rlogin so the rule that enforces /etc/nologin (for example, the pam_nologin or equivalent check) is listed before any less-restrictive rule that would permit access. This ensures rlogin is blocked when /etc/nologin is present.
PAM (rlogin) order of rules in /etc/pam.d/rlogin = ensure the nologin-enforcing rule appears before any less-restrictive allow rules
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1346?
CVE-1999-1346 is considered a moderate severity vulnerability due to its potential to bypass security controls.
How do I fix CVE-1999-1346?
To fix CVE-1999-1346, ensure that the PAM configuration file for rlogin is correctly ordered to prevent access when /etc/nologin is in place.
Which versions of Red Hat Linux are affected by CVE-1999-1346?
CVE-1999-1346 affects Red Hat Linux versions up to and including 6.1.
What is the impact of exploiting CVE-1999-1346?
Exploiting CVE-1999-1346 allows unauthorized users to access the system via rlogin despite it being disabled.
Is there a workaround for CVE-1999-1346?
A potential workaround for CVE-1999-1346 is to manually adjust the ordering of rules in the PAM configuration to prioritize restrictions.