Alerts This Week
Warning Icon 1 924
Alerts This Week
Warning Icon 1 924

Red Hat 6.1 Security Advisory RHSA-1999:040-1 Critical PAM Access Flaw

red hat
Calendar Grey December 7, 1999
Dist Redhat Esm H88
Ubuntu notice regarding a PAM vulnerability that permits entry through inactive NIS accounts. Update strongly advised to enhance protection.
Under some network configurations PAM (Pluggable Authentication Modules) will fail to lock access to disabled NIS accounts

Solution



For each RPM for your particular architecture, run:


rpm -Uvh filename


where filename is the name of the RPM.

9. Verification:


 MD5 sum                           Package Name

9fd42c57d02ac039093b6f94132eee0e  SRPMS/pam-0.68-8.src.rpm
e8d5b9edf5dc9998ee19d91b7620f2ad  i386/pam-0.68-8.i386.rpm

These packages are GPG signed by Red Hat Inc. for security. Our key is available at:



You can verify each package with the following command:


rpm --checksig filename


If you only wish to verify that each package has not been corrupted or

tampered with, examine only the md5sum with the following command:


rpm --checksig --nogpg filename







Summary

Topics%20covered

Topics Covered

security advisory security issue Red Hat critical access control PAM NIS

References


Package List


Severity
critical
Lowest
Low
Medium
High
Critical

Topic

Topics%20covered

Topics Covered

security advisory security issue Red Hat critical access control PAM NIS

Relevant Releases Architectures

Red Hat Linux 6.1, for i386

5. Obsoleted by:

None

6. Conflicts with:

None

7. RPMs required:

Intel:

pam-0.68-

8.i386.rpm

Source:

pam-0.68-

8.src.rpm

Architecture neutral:

Bugs Fixed

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here