RHSA-2004:304

csafUSredhat_csaf

Red Hat Security Advisory: pam security update

view advisory published 2004-08-18

Updated pam packages that fix a security vulnerability are now available for Red Hat Enterprise Linux 2.1.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2003-0388USmedium4.6Exploit
pam_wheel in Linux-PAM 0.78, with the trust option enabled and the use_uid option disabled, allows local users to spoof log entries and gain privileges by causing getlogin() to ret…
02

references

External citations — patches, advisories, analysis.

03

remediations (4)

  • FixedRed Hat Enterprise Linux AS (Advanced Server) version 2.1

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/

    https://access.redhat.com/errata/RHSA-2004:304
  • FixedRed Hat Enterprise Linux ES version 2.1

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/

    https://access.redhat.com/errata/RHSA-2004:304
  • FixedRed Hat Enterprise Linux WS version 2.1

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/

    https://access.redhat.com/errata/RHSA-2004:304
  • FixedRed Hat Linux Advanced Workstation 2.1

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/

    https://access.redhat.com/errata/RHSA-2004:304
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan