CVE-2011-3148: Buffer Overflow
Stack-based buffer overflow in the assembleline function in modules/pamenv/pamenv.c in Linux-PAM (aka pam) before 1.1.5 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long string of white spaces at the beginning of the ~/.pamenvironment file.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2011-3148?
CVE-2011-3148 is classified as a high severity vulnerability due to its potential to cause a denial of service and execute arbitrary code.
How do I fix CVE-2011-3148?
To fix CVE-2011-3148, upgrade to Linux-PAM version 1.1.5 or later.
Which versions of Linux-PAM are affected by CVE-2011-3148?
CVE-2011-3148 affects Linux-PAM versions prior to 1.1.5, including multiple versions from 0.99.1.0 to 1.1.4.
What causes CVE-2011-3148?
CVE-2011-3148 is caused by a stack-based buffer overflow in the _assemble_line function due to long strings of whitespace in the ~/.pam_environment file.
Is CVE-2011-3148 exploitable remotely?
CVE-2011-3148 is not remotely exploitable as it requires local access to the victim's system.