4 ms·

I can't seem to replicate on a Debian unstable box, where pam hasn't been updated since April [0], but I don't have an Ubuntu box handy to verify that I'm prope

I can't seem to replicate on a Debian unstable box, where pam hasn't been updated since April [0], but I don't have an Ubuntu box handy to verify that I'm properly trying to exploit it. [0]: http://packages.qa.debian.org/p/pam.html http://packages.qa.debian.org/p/pam.html

joeyh 16y ago
The security hole was introduced by a Ubuntu-specfic patch to pam. The pam_motd-legal-notice patch was added in July 2009 due to https://bugs.launchpad.net/ubuntu/+source/pam/+bug/399071 https://bugs.launchpad.net/ubuntu/+source/pam/+bug/399071