pam_mount 插入式验证模块任意文件重写漏洞

https://www.securityfocus.com/bid/32374
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200811-298

pam_mount是一个插入式验证模块，可以为用户会话加载卷。pam-mount中的passwdehd允许本地用户借助一个对/tmp/passwdehd.#####临时文件的symlink攻击，重写任意文件。

SuSE SUSE Linux Enterprise Server 9 SuSE SUSE Linux Enterprise Server 10 S.u.S.E. openSUSE 11.1 S.u.S.E. openSUSE 11.0 S.u.S.E. openSUSE 10.3 pam_mount pam_mount 0.43

来源:SUSE
名称:SUSE-SR:2009:005
链接:http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html
来源:MLIST
名称:[debian-devel]20080811Re:Possiblemassbugfiling:ThepossibilityofattackwiththehelpofsymlinksinsomeDebianpackages
链接:http://lists.debian.org/debian-devel/2008/08/msg00285.html