CVE-1999-0342: Medium severity PAM PAM vulnerability
Linux PAM modules allow local users to gain root access using temporary files.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Pam Externfrom your environment.Uninstall the pam_extern module from systems where it is not required to eliminate the vulnerable component until a fixed release is provided.
- Configuration
Disable the pam_extern module in system PAM configurations until a vendor patch is available. Remove or comment out any lines referencing pam_extern in /etc/pam.d/* and reload services as appropriate.
Linux PAM (pam_extern) module_enabled = false - Compensating control
Mitigate exploitation by preventing unprivileged users from abusing temporary files: restrict write access to world-writable directories, ensure /tmp and other temporary directories have correct sticky-bit and permissions, and consider mounting /tmp with restrictive options (e.g., noexec/nosuid/nodev) or isolating untrusted accounts until the vulnerability is remediated.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0342?
CVE-1999-0342 is considered a high severity vulnerability allowing local users to gain root access.
How do I fix CVE-1999-0342?
To fix CVE-1999-0342, upgrade to the latest version of the PAM modules that have patched the vulnerability.
Who is affected by CVE-1999-0342?
Any system running affected versions of PAM modules, specifically version 0.64 and below, is susceptible to CVE-1999-0342.
What are the potential risks of CVE-1999-0342?
The potential risks of CVE-1999-0342 include unauthorized root access which may lead to system compromise.
How does CVE-1999-0342 exploit temporary files?
CVE-1999-0342 exploits temporary files used by PAM modules, allowing attackers to overwrite sensitive data and escalate privileges.