S-302: xine-lib Vulnerabilities


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) S-302: xine-lib Vulnerabilities
# 1  
Old 05-30-2008
S-302: xine-lib Vulnerabilities

Multiple vulnerabilities have been discovered in xine-lib, a library which supplies most of the application functionality of the xine multimedia player. The risk is MEDIUM. A remote user who can coerce a user to open a specially crafted document in one of the xine-lib formats could run arbitrary code as the logged-in user.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question
pam_rhosts_auth(5)					Standards, Environments, and Macros					pam_rhosts_auth(5)

NAME
pam_rhosts_auth - authentication management PAM module using ruserok() SYNOPSIS
/usr/lib/security/pam_rhosts_auth.so.1 DESCRIPTION
The rhosts PAM module, /usr/lib/security/pam_rhosts_auth.so.1, authenticates a user via the rlogin authentication protocol. Only pam_sm_authenticate() is implemented within this module. pam_sm_authenticate() uses the ruserok(3SOCKET) library function to authenticate the rlogin or rsh user. pam_sm_setcred() is a null function. /usr/lib/security/pam_rhosts_auth.so.1 is designed to be stacked on top of the /usr/lib/security/pam_unix.so.1 module for both the rlogin and rsh services. This module is normally configured as sufficient so that subsequent authentication is performed only on failure of pam_sm_authenticate(). The following option may be passed in to this service module: debug syslog(3C) debugging information at LOG_DEBUG level. ATTRIBUTES
See attributes(5) for descriptions of the following attributes: +-----------------------------+-----------------------------+ | ATTRIBUTE TYPE | ATTRIBUTE VALUE | |MT Level |MT-Safe with exceptions | +-----------------------------+-----------------------------+ SEE ALSO
pam(3PAM), pam_authenticate(3PAM), ruserok(3SOCKET), syslog(3C), libpam(3LIB), pam.conf(4), attributes(5) NOTES
The interfaces in libpam() are MT-Safe only if each thread within the multi-threaded application uses its own PAM handle. SunOS 5.10 28 Oct 1996 pam_rhosts_auth(5)