oss-security - CVE Request: pam

Message-ID: <1318943004.5781.2.camel@mdlinux>
Date: Tue, 18 Oct 2011 09:03:24 -0400
From: Marc Deslauriers <marc.deslauriers@...onical.com>
To: coley@...us.mitre.org
Cc: oss-security@...ts.openwall.com, security@...ntu.com
Subject: CVE Request: pam

Hello,

Could a CVE please be assigned to the following issue:

A Debian/Ubuntu specific patch in pam, update-motd, calls the scripts
in /etc/update-motd.d as root without sanitizing the environment.

See:

https://bugs.launchpad.net/ubuntu/+source/pam/+bug/610125

Thanks,

Marc.

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.