Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
pam_oath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because, in the context of PAM code running as root, it mishandles usersfile access, such as by calling fchown in the presence of a symlink.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OATH Toolkit 安全漏洞
Vulnerability Description
OATH Toolkit是deepin开源的一个工具包。 OATH Toolkit 2.6.7至2.6.11版本存在安全漏洞，该漏洞源于PAM模块在用户主目录中放置OTP状态文件时，允许恶意用户危害环境。
CVSS Information
N/A
Vulnerability Type
N/A