pam_wheel in Linux-PAM 0.78, with the trust option enabled and the use_uid option disabled, allows local users to spoof log entries and gain privileges by causing getlogin() to return a spoofed user name.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Linux_pam | Andrew_morgan | * | 0.77 (including) |