CVE-2013-4285 - A certain Gentoo patch for the PAM S/Key module does not properly clear credentials from memory, whi

CVE-2013-4285

Summary

A certain Gentoo patch for the PAM S/Key module does not properly clear credentials from memory, which allows local users to obtain sensitive information by reading system memory.

References

http://security.gentoo.org/glsa/glsa-201402-12.xml

Vulnerable Configurations

cpe:2.3:a:dkorunic:pam_s\/key:-:*:*:*:*:*:*:*
cpe:2.3:a:dkorunic:pam_s\/key:-:*:*:*:*:*:*:*

CVSS

Base:	2.1 (as of 29-04-2014 - 11:09)
Impact:
Exploitability:

CWE

CWE-255

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	NONE	NONE

cvss-vector via4

AV:L/AC:L/Au:N/C:P/I:N/A:N

refmap via4

gentoo

GLSA-201402-12

Last major update

29-04-2014 - 11:09

Published

28-04-2014 - 14:09

Last modified

29-04-2014 - 11:09