CVE-2014-2583: Path Traversal
Multiple directory traversal vulnerabilities in pamtimestamp.c in the pamtimestamp module for Linux-PAM (aka pam) 1.1.8 allow local users to create arbitrary files or possibly bypass authentication via a .. (dot dot) in the (1) PAMRUSER value to the getruser function or (2) PAMTTY value to the checktty function, which is used by the formattimestampname function.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/pamto a version that resolves this vulnerability.Fixed in 1.4.0-9+deb11u1Fixed in 1.5.2-6+deb12u1Fixed in 1.7.0-3
Event History
Frequently Asked Questions
What is the severity of CVE-2014-2583?
CVE-2014-2583 is classified as a medium severity vulnerability due to its potential to allow local users to bypass authentication.
Who is affected by CVE-2014-2583?
The vulnerability affects local users of Linux-PAM version 1.1.8, specifically those utilizing the pam_timestamp module.
How do I fix CVE-2014-2583?
To fix CVE-2014-2583, update Linux-PAM to version 1.4.0-9+deb11u1, 1.5.2-6+deb12u1, or 1.5.3-7.
What types of attacks can exploit CVE-2014-2583?
CVE-2014-2583 can be exploited through directory traversal attacks that allow an attacker to create arbitrary files or bypass authentication.
What is the exploit mechanism behind CVE-2014-2583?
The exploit mechanism involves using dot-dot notation in the PAM_RUSER or PAM_TTY values to manipulate the get_ruser function.