Test ID:	1.3.6.1.4.1.25623.1.0.64888
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-828-1)
Summary:	The remote host is missing an update for the 'pam' package(s) announced via the USN-828-1 advisory.
Description:	Summary: The remote host is missing an update for the 'pam' package(s) announced via the USN-828-1 advisory. Vulnerability Insight: Russell Senior discovered that the system authentication module selection mechanism for PAM did not safely handle an empty selection. If an administrator had specifically removed the default list of modules or failed to chose a module when operating debconf in a very unlikely non-default configuration, PAM would allow any authentication attempt, which could lead to remote attackers gaining access to a system with arbitrary privileges. This did not affect default Ubuntu installations. Affected Software/OS: 'pam' package(s) on Ubuntu 8.10, Ubuntu 9.04. Solution: Please install the updated package(s). CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-3232 BugTraq ID: 36306 http://www.securityfocus.com/bid/36306 http://www.openwall.com/lists/oss-security/2009/09/08/7 http://secunia.com/advisories/36620 https://usn.ubuntu.com/828-1/
Copyright	Copyright (C) 2009 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.