Double free vulnerability in the PyPAM_conv in PAMmodule.c in PyPam 0.5.0 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a NULL byte in a password string.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - PyPAM: Double free by processing passwords containing NULL-bytes (CVE-2012-1502)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

The remote host is affected by the vulnerability described in GLSA-201507-09 (PyPAM: Arbitrary code execution)

    PyPAM does not handle passwords correctly if there is NULL byte in the       string.
  Impact :

    A remote attacker could possibly execute arbitrary code or cause a       Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

python-pam was prone to a double-free issue

python-pam was prone to a double-free issue which is fixed by this update. (CVE-2012-1502)

python-pam was prone to a double-free issue which is fixed by the update. (CVE-2012-1502)

Markus Vervier discovered a double free in the Python interface to the PAM library, which could lead to denial of service.

Markus Vervier discovered that PyPAM incorrectly handled passwords containing NULL bytes. An attacker could exploit this to cause applications using PyPAM to crash, or possibly execute arbitrary code.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
199732	RHEL 6 : pypam (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
84654	GLSA-201507-09 : PyPAM: Arbitrary code execution	Nessus	Gentoo Local Security Checks	high
74599	openSUSE Security Update : python-pam (openSUSE-SU-2012:0487-1)	Nessus	SuSE Local Security Checks	high
64219	SuSE 11.1 Security Update : python-pam (SAT Patch Number 6025)	Nessus	SuSE Local Security Checks	high
59308	SuSE 10 Security Update : python-pam (ZYPP Patch Number 8031)	Nessus	SuSE Local Security Checks	high
58303	Debian DSA-2430-1 : python-pam - double free	Nessus	Debian Local Security Checks	high
58301	Ubuntu 10.04 LTS / 10.10 / 11.04 / 11.10 : python-pam vulnerability (USN-1395-1)	Nessus	Ubuntu Local Security Checks	high

Detections

Analytics

CVE-2012-1502

critical

Tenable Plugins

critical

high

high

high

high

high

high