CVEvulnerability
CVE-2000-0843
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2000-11-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Buffer overflow in pam_smb and pam_ntdom pluggable authentication modules (PAM) allow remote attackers to execute arbitrary commands via a login with a long user name.
Affected configurations
• dave airlie pam smb 1.1.5
• luke kenneth casson leighton pam ntdom 0.23
References
- http://archives.neohapsis.com/archives/bugtraq/2000-09/0073.html archives.neohapsis.com
- http://archives.neohapsis.com/archives/bugtraq/2000-09/0114.html archives.neohapsis.com
- http://www.debian.org/security/2000/20000911 Patch, Vendor Advisory
- http://www.linux-mandrake.com/en/security/MDKSA-2000-047.php3 www.linux-mandrake.com
- http://www.novell.com/linux/security/advisories/adv8_draht_pam_smb_txt.html www.novell.com
- http://www.securityfocus.com/bid/1666 Patch, Vendor Advisory
- http://archives.neohapsis.com/archives/bugtraq/2000-09/0073.html archives.neohapsis.com
- http://archives.neohapsis.com/archives/bugtraq/2000-09/0114.html archives.neohapsis.com
- http://www.debian.org/security/2000/20000911 Patch, Vendor Advisory
- http://www.linux-mandrake.com/en/security/MDKSA-2000-047.php3 www.linux-mandrake.com
- http://www.novell.com/linux/security/advisories/adv8_draht_pam_smb_txt.html www.novell.com
- http://www.securityfocus.com/bid/1666 Patch, Vendor Advisory