CVE-2017-6967 in xrdp
Summary
xrdp 0.9.1 calls the PAM function auth_start_session() in an incorrect location, leading to PAM session modules not being properly initialized, with a potential consequence of incorrect configurations or elevation of privileges, aka a pam_limits.so bypass.
Reservation
03/17/2017
Disclosure
03/17/2017
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 98230 | xrdp PAM Session auth_start_session access control | 264 | Not defined | Official fix | CVE-2017-6967 |