Bugtraq mailing list archives

Re: Exploit for Mandrake 6.1 (PAM/userhelper bug)

From: bigdog () DOGPOUND VNET NET (Matt Davis)
Date: Fri, 17 Mar 2000 17:07:50 -0500


Tested systems..

Redhat 6.0 w/pam-0.68-10                - didnt work
Redhat 6.1 w/pam-0.68-7                 - worked

Then on the same machine (having root and being the nice 'hacker' i was,
upgraded pam for him..  Then retested).

Redhat 6.1 w/pam-0.68-10                - didnt work

And that pam rpm is on the Redhat 6.1 update web site.

--
Matt Davis - ICQ# 934680
http://dogpound.vnet.net/
NoWonder UNIX Tech - http://www.nowonder.com

"!sgub evah t'nseod CP sihT ?sgub naem ayaddahW"

Current thread:

Our old friend Firewall-1, (continued)
- Our old friend Firewall-1 Chris Brenton (Mar 11)
  - Re: Our old friend Firewall-1 Hugo.van.der.Kooij () CAIW NL (Mar 14)
    - Re: Our old friend Firewall-1 Chris Brenton (Mar 15)
  - TESO & C-Skills development advisory -- imwheel Sebastian (Mar 16)
    - Re: TESO & C-Skills development advisory -- imwheel WHiTe VaMPiRe (Mar 19)
- Re: TESO advisory -- wmcdplay Kris Kennaway (Mar 11)
- CSS Exploits + RDS (IE5) Shane Hird (Mar 12)
- Advisory Update: ServerIron TCP/IP predictability fixed Andrew van der Stock (Mar 12)
  - Exploit for Mandrake 6.1 (PAM/userhelper bug) Paulo Ribeiro (Mar 14)
    - Re: Exploit for Mandrake 6.1 (PAM/userhelper bug) Darron Froese (Mar 17)
    - Re: Exploit for Mandrake 6.1 (PAM/userhelper bug) Matt Davis (Mar 17)
    - Re: Exploit for Mandrake 6.1 (PAM/userhelper bug) Jeremy Gault (Mar 21)
  - Oracle Web Listener 4.0.x Cerberus Security Team (Mar 14)
  - Re: Advisory Update: ServerIron TCP/IP predictability fixed H D Moore (Mar 14)
    - Re: Advisory Update: ServerIron TCP/IP predictability fixed Max Vision (Mar 16)
    - FreeBSD Security Advisory: FreeBSD-SA-00:07.mh [REVISED] FreeBSD Security Officer (Mar 19)
  - Bypassing IP filters in Bordermanager 3.5 Roy Sigurd Karlsbakk (Mar 15)
  - Local / Remote DoS Attack in MERCUR WebView WebMail-Client 1.0 for Windows 98/NT Vulnerability Ussr Labs (Mar 15)
  - Certificate Validation Error in Netscape Browsers... Dennis W. Mattison (Little Wolf) (Mar 15)
  - TESO & C-Skills development advisory -- kreatecd Sebastian (Mar 16)
  - Trend Micro release patch for "OfficeScan DoS & Message Replay" V ulnerabilies Richard Sheng (Mar 16)

(Thread continues...)