CVE-2024-10963: Pam: improper hostname interpretation in pam_access leads to access control bypass
A flaw was found in pamaccess, where certain rules in its configuration file are mistakenly treated as hostnames. This vulnerability allows attackers to trick the system by pretending to be a trusted hostname, gaining unauthorized access. This issue poses a risk for systems that rely on this feature to control who can access certain services or terminals.
Other sources
A vulnerability in pamaccess allows unauthorized users to bypass access restrictions by spoofing hostnames. This occurs because pamaccess improperly interprets local access.conf rules to match remote hostnames, compromising configurations intended to restrict local access only. The issue affects all deployments using this configuration method, posing a significant risk to secure environments.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-10963?
The severity of CVE-2024-10963 is classified as high due to its potential for unauthorized access.
How do I fix CVE-2024-10963?
To fix CVE-2024-10963, you should update the pam_access configuration to prevent misinterpretation of certain rules as hostnames.
What systems are affected by CVE-2024-10963?
CVE-2024-10963 affects systems using pam_access with vulnerable configuration settings.
What type of vulnerability is CVE-2024-10963?
CVE-2024-10963 is a configuration vulnerability that enables unauthorized access through hostname impersonation.
Can CVE-2024-10963 be exploited remotely?
Yes, CVE-2024-10963 can potentially be exploited remotely if an attacker knows how to manipulate the hostname configurations.