CVE-2013-4285

Published: Apr 28, 2014Modified: May 6, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

A certain Gentoo patch for the PAM S/Key module does not properly clear credentials from memory, which allows local users to obtain sensitive information by reading system memory.

Affected (1)

Products: Dkorunic: Pam S/key

Dkorunic

1 product

Pam S/key

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Dkorunic Pam S/key	All versions

Related CWEs

CWE-255

References (2)

http://security.gentoo.org/glsa/glsa-201402-12.xml

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-201402-12.xml

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.