Date: Tue, 12 Sep 2000 12:16:47 -0600
From: Linux Mandrake Security Team security@LINUX-MANDRAKE.COM
Subject: MDKSA-2000:047 - Linux Mandrake not vulnerable to
Linux-Mandrake Security Update Advisory
Package name: pam_smb and pam_ntdom
Date: September 12th, 2000
Advisory ID: MDKSA-2000:047
Affected versions: None
A bug exists in two PAM modules: pam_smb and pam_ntdom. They are
pluggable authentication modules that allow authentication of
usernames and passwords in PAM-compatible environments against
Windows and Samba. Both modules contain remotely exploitable stack
buffer overflows. This bug allows an attacker to execute arbitary
code as root. The versions affected are: pam_smb < 1.1.6 and
pam_ntdom < 0.24.
Linux-Mandrake does not ship with either the pam_smb or
pam_ntdom modules and is therefore not vulnerable to this exploit.
Linux-Mandrake users who have installed this package on their own
are encouraged to upgrade to the latest versions available:
Some of the products that appear on this site are from companies from which QuinStreet receives compensation. This compensation may impact how and where products appear on this site including, for example, the order in which they appear. QuinStreet does not include all companies or all types of products available in the marketplace.