CVE-2000-0052

Description

Red Hat userhelper program in the usermode package allows local users to gain root access via PAM and a .. (dot dot) attack.

Affected products

• mandrakesoft / mandrake_linux6.0 – 6.0
• mandrakesoft / mandrake_linux6.1 – 6.1
• RedHat / linux6.0 – 6.0
• RedHat / linux6.1 – 6.1
• turbolinux / turbolinux3.5b2 – 3.5b2
• turbolinux / turbolinux4.2 – 4.2
• turbolinux / turbolinux4.4 – 4.4
• turbolinux / turbolinux6.0.2 – 6.0.2

Exploits & proofs of concept

• exploit-dbMandrake 6.x / RedHat 6.x / Turbolinux 3.5 b2/4.x/6.0.2 userhelper/PAM - Path (2)by Elias Levy
• exploit-dbMandrake 6.x / RedHat 6.x / Turbolinux 3.5 b2/4.x/6.0.2 userhelper/PAM - Path (1)by dildog

References

• MISChttp://www.redhat.com/support/errata/RHSA-2000-001.html
• MISChttp://www.securityfocus.com/bid/913
• VENDOR_ADVISORYhttp://www.l0pht.com/advisories/pam_advisory
• MISChttp://xforce.iss.net/search.php3?type=2&pattern=linux-pam-userhelper