Update to new minor upstream release. Minor security issue fixes and bug fixes.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has pam packages installed that are affected by multiple vulnerabilities:

  - pam_unix.so in Linux-PAM 0.99.7.0 allows context-     dependent attackers to log into accounts whose password     hash, as stored in /etc/passwd or /etc/shadow, has only     two characters. (CVE-2007-0003)

  - Linux-PAM before 1.0.4 does not enforce the minimum     password age (MINDAYS) as specified in /etc/shadow,     which allows local users to bypass intended security     policy and change their passwords sooner than specified.
    (CVE-2009-0579)

  - The run_coprocess function in pam_xauth.c in the     pam_xauth module in Linux-PAM (aka pam) before 1.1.2     does not check the return values of the setuid, setgid,     and setgroups system calls, which might allow local     users to read arbitrary files by executing a program     that relies on the pam_xauth PAM check. (CVE-2010-3316)

  - The (1) pam_env and (2) pam_mail modules in Linux-PAM     (aka pam) before 1.1.2 use root privileges during read     access to files and directories that belong to arbitrary     user accounts, which might allow local users to obtain     sensitive information by leveraging this filesystem     activity, as demonstrated by a symlink attack on the     .pam_environment file in a user's home directory.
    (CVE-2010-3435)

  - pam_namespace.c in the pam_namespace module in Linux-PAM     (aka pam) before 1.1.3 uses the environment of the     invoking application or service during execution of the     namespace.init script, which might allow local users to     gain privileges by running a setuid program that relies     on the pam_namespace PAM check, as demonstrated by the     sudo program. (CVE-2010-3853)

  - The pam_userdb module for Pam uses a case-insensitive     method to compare hashed passwords, which makes it     easier for attackers to guess the password via a brute     force attack. (CVE-2013-7041)

  - Multiple directory traversal vulnerabilities in     pam_timestamp.c in the pam_timestamp module for Linux-     PAM (aka pam) 1.1.8 allow local users to create     arbitrary files or possibly bypass authentication via a     .. (dot dot) in the (1) PAM_RUSER value to the get_ruser     function or (2) PAM_TTY value to the check_tty function,     which is used by the format_timestamp_name function.
    (CVE-2014-2583)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

執行 CORE 5.04 / MAIN 5.04 版的遠端 NewStart CGSL 主機安裝了受多個弱點影響的 pam 套件：- Linux-PAM 0.99.7.0 中的 pam_unix.so 讓內容相依的攻擊者得以登入密碼中只有兩個字元的密碼雜湊帳戶，此密碼儲存在 /etc/passwd 或 /etc/shadow 下。(CVE-2007-0003) - 1.0.4 之前的 Linux-PAM 未強制執行 /etc/shadow 所指定的最短密碼期限 (MINDAYS)，本機使用者因而得以繞過預定的安全性原則並比指定的時間提早變更密碼。(CVE-2009-0579) - 在 1.1.2 之前的 Linux-PAM (亦即 pam) 中，pam_xauth 模組內 pam_xauth.c 的 run_coprocess 函式未檢查 setuid、setgid 和 setgroups 系統呼叫的傳回值，本機使用者因而得以藉由執行需進行 pam_xauth PAM 檢查的程式來讀取任意檔案。(CVE-2010-3316) - 在 1.1.2 之前的 Linux-PAM (亦即 pam) 中，(1) pam_env 和 (2) pam_mail 模組在讀取存取屬於任意使用者帳戶的檔案及目錄時使用 root 權限，本機使用者可能因而得以藉由利用此檔案系統活動而取得敏感資訊，對使用者主目錄下之 .pam_environment 檔案發動的符號連結攻擊即為一例。(CVE-2010-3435) - 在 1.1.3 之前的 Linux-PAM (亦即 pam) 中，pam_namespace 模組的 pam_namespace.c 在執行 namespace.init 指令碼時，使用叫用應用程式或服務的環境，本機使用者因而得以藉由執行需進行 pam_namespace PAM 檢查的 setuid 程式而獲得權限，sudo 程式即為一例。(CVE-2010-3853) - Pam 的 pam_userdb 模組使用區分大小寫的方式來比對雜湊密碼，攻擊者易透過暴力密碼破解攻擊猜測出密碼。(CVE-2013-7041) - 在 Linux- PAM (亦即 pam) 1.1.8 中，pam_timestamp 模組的 pam_timestamp.c 讓本機使用者得以透過在(1) get_ruser 函式的 PAM_RUSER 值或 (2) check_tty 函式的 PAM_TTY 值 (format_timestamp_name 函式使用的值) 中使用 .. (點點)，建立任意檔案甚或可能繞過驗證。(CVE-2014-2583) 請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼。

运行版本 CORE 5.04 / MAIN 5.04 的远程 NewStart CGSL 主机安装有受多个漏洞影响的 pam 程序包：- Linux-PAM 0.99.7.0 中的 pam_unix.so 允许环境相关的攻击者登录密码为哈希（存储在 /etc/passwd or /etc/shadow，只有两个字符）的帐户。(CVE-2007-0003) - 在 1.0.4 之前的 Linux-PAM 不会执行 /etc/shadow 规定的最短使用期限 (MINDAYS)，允许本地用户绕过预期安全策略，并且比规定的时间更早变更密码。(CVE-2009-0579) - 在 1.1.2 之前的 Linux-PAM（亦称 pam）中，pam_xauth 模块的 pam_xauth.c 中的 run_coprocess 函数不会检查 setuid、setgid 和 setgroups 系统调用的返回值，从而允许本地用户通过执行依赖 pam_xauth PAM 检查的程序读取任意文件。(CVE-2010-3316) - 在 1.1.2 之前的 Linux-PAM（亦称 pam）中的 (1) pam_env 和 (2) pam_mail 模块在读取访问属于任意用户帐户的文件和目录期间使用根权限，可能允许本地用户利用此文件系统活动获取敏感信息，在用户主目录的 .pam_environment 文件的 symlink 攻击即是一例。(CVE-2010-3435) - 在 1.1.3 之前的 Linux-PAM（亦称 pam）中，pam_namespace 模块的 pam_namespace.c 在执行 namespace.init 脚本期间使用调用应用程序或服务的环境，可能允许本地用户通过运行依赖 pam_namespace PAM 检查的 setuid 程序获得权限，sudo 程序即是一例。(CVE-2010-3853) - Pam 的 pam_userdb 模块使用不区分大小写的方法比较哈希的密码，使攻击者更易于通过暴力密码破解攻击猜测密码。(CVE-2013-7041) - 在用于 Linux-PAM（亦称 pam）1.1.8 的 pam_timestamp 模块中的 pam_timestamp.c 的多个目录遍历漏洞允许本地用户创建任意文件或可能绕过身份验证，其方式是通过(1) get_ruser 函数的 PAM_RUSER 值或 (2) check_tty 函数的 PAM_TTY 值中的 ..（点点），并由 format_timestamp_name 函数使用。(CVE-2014-2583) 请注意，Nessus 并未针对此问题进行测试，而仅依赖应用程序自我报告的版本号。

The remote NewStart CGSL host, running version MAIN 6.06, has pam packages installed that are affected by multiple vulnerabilities:

  - pam_namespace.c in the pam_namespace module in Linux-PAM (aka pam) before 1.1.3 uses the environment of     the invoking application or service during execution of the namespace.init script, which might allow local     users to gain privileges by running a setuid program that relies on the pam_namespace PAM check, as     demonstrated by the sudo program. (CVE-2010-3853)

  - pam_unix.so in Linux-PAM 0.99.7.0 allows context-dependent attackers to log into accounts whose password     hash, as stored in /etc/passwd or /etc/shadow, has only two characters. (CVE-2007-0003)

  - Linux-PAM before 1.0.4 does not enforce the minimum password age (MINDAYS) as specified in /etc/shadow,     which allows local users to bypass intended security policy and change their passwords sooner than     specified. (CVE-2009-0579)

  - The run_coprocess function in pam_xauth.c in the pam_xauth module in Linux-PAM (aka pam) before 1.1.2 does     not check the return values of the setuid, setgid, and setgroups system calls, which might allow local     users to read arbitrary files by executing a program that relies on the pam_xauth PAM check.
    (CVE-2010-3316)

  - The (1) pam_env and (2) pam_mail modules in Linux-PAM (aka pam) before 1.1.2 use root privileges during     read access to files and directories that belong to arbitrary user accounts, which might allow local users     to obtain sensitive information by leveraging this filesystem activity, as demonstrated by a symlink     attack on the .pam_environment file in a user's home directory. (CVE-2010-3435)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
37813	Fedora 10 : pam-1.0.4-4.fc10 (2009-3204)	Nessus	Fedora Local Security Checks	2009/4/23	2021/1/11	medium
129937	NewStart CGSL CORE 5.04 / MAIN 5.04 : pam Multiple Vulnerabilities (NS-SA-2019-0198)	Nessus	NewStart CGSL Local Security Checks	2019/10/15	2024/4/18	high
129937	NewStart CGSL CORE 5.04 / MAIN 5.04：pam 多個弱點 (NS-SA-2019-0198)	Nessus	NewStart CGSL Local Security Checks	2019/10/15	2024/4/18	high
129937	NewStart CGSL CORE 5.04 / MAIN 5.04：pam 多个漏洞 (NS-SA-2019-0198)	Nessus	NewStart CGSL Local Security Checks	2019/10/15	2024/4/18	high
36156	Fedora 9 : pam-1.0.4-4.fc9 (2009-3231)	Nessus	Fedora Local Security Checks	2009/4/15	2021/1/11	medium
266242	NewStart CGSL MAIN 6.06 : pam Multiple Vulnerabilities (NS-SA-2025-0213)	Nessus	NewStart CGSL Local Security Checks	2025/9/30	2025/9/30	high

检测

插件搜索

medium

high

high

high

medium

high