Test ID:	1.3.6.1.4.1.25623.1.0.123701
Category:	Oracle Linux Local Security Checks
Title:	Oracle: Security Advisory (ELSA-2013-0521)
Summary:	The remote host is missing an update for the 'pam' package(s) announced via the ELSA-2013-0521 advisory.
Description:	Summary: The remote host is missing an update for the 'pam' package(s) announced via the ELSA-2013-0521 advisory. Vulnerability Insight: [1.1.1-13] - fix environment file handling problems - CVE-2011-3148 (#746619) and CVE-2011-3148 (#746620) [1.1.1-12] - add character sequence test to pam_cracklib - drop unused difignore option from pam_cracklib (#811243) - add enforce_for_root option to pam_cracklib (#588893) - mention limits.d in the limits.conf(5) manpage (#723297) - add ability to lock out inactive accounts to pam_lastlog - fix require_selinux option in pam_namespace (#750601) - add mntopts flag for tmpfs polyinstantiation method - preserve authtok_type in pam_get_authtok() (#811168) - fix username mismatch in pam_unix remember feature (#815516) - relax restriction of root in pam_pwhistory - relax soft nproc limit for root in 90-nproc.conf [1.1.1-11] - additional password checks in pam_cracklib Affected Software/OS: 'pam' package(s) on Oracle Linux 6. Solution: Please install the updated package(s). CVSS Score: 4.6 CVSS Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-3148 http://security.gentoo.org/glsa/glsa-201206-31.xml http://secunia.com/advisories/46583 http://secunia.com/advisories/49711 http://www.ubuntu.com/usn/USN-1237-1 Common Vulnerability Exposure (CVE) ID: CVE-2011-3149
Copyright	Copyright (C) 2015 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.