<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "http://bugs.gentoo.org/bugzilla.dtd">

<bugzilla version="2.22.7"
          urlbase="http://bugs.gentoo.org/"
          maintainer="bugzilla@gentoo.org"
>

    <bug>
          <bug_id>120842</bug_id>
          
          <creation_ts>2006-01-29 11:03 0000</creation_ts>
          <short_desc>sys-auth/pam_mysql-0.6.2 Denial of Service</short_desc>
          <delta_ts>2006-06-15 09:14:51 0000</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>Gentoo Security</product>
          <component>Vulnerabilities</component>
          <version>unspecified</version>
          <rep_platform>All</rep_platform>
          <op_sys>Linux</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          <bug_file_loc>http://pam-mysql.sourceforge.net/News/</bug_file_loc>
          <status_whiteboard>B2? [glsa] DerCorny</status_whiteboard>
          
          <priority>P2</priority>
          <bug_severity>enhancement</bug_severity>
          <target_milestone>---</target_milestone>
          <dependson>123405</dependson>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter>sander@knopper.tk</reporter>
          <assigned_to>security@gentoo.org</assigned_to>
          <cc>benjamin200@arcor.de</cc>
    
    <cc>cyrius@linog-consulting.com</cc>
    
    <cc>hanno@gentoo.org</cc>
    
    <cc>jayson@ktechs.net</cc>
    
    <cc>pam-bugs@gentoo.org</cc>
    
    <cc>tcort@gentoo.org</cc>
    
    <cc>vivo@gentoo.org</cc>

      

      
          <long_desc isprivate="0">
            <who>sander@knopper.tk</who>
            <bug_when>2006-01-29 11:03:28 0000</bug_when>
            <thetext>I&apos;d appreciate it if someone put the latest stable release from upstream in portage. At the time of writing this is 0.6.2, though work seems to be going on for 0.7.

Thanks in advance!</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>cyrius@linog-consulting.com</who>
            <bug_when>2006-02-18 03:11:47 0000</bug_when>
            <thetext>Created an attachment (id=80075)
Ebuild proposal for the 0.6.2 pam_mysql

</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>cyrius@linog-consulting.com</who>
            <bug_when>2006-02-18 03:12:21 0000</bug_when>
            <thetext>(From update of attachment 80075)
Pleasure to help</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>cyrius@linog-consulting.com</who>
            <bug_when>2006-02-18 03:20:30 0000</bug_when>
            <thetext>Created an attachment (id=80076)
Ebuild proposal for the 0.6.2 pam_mysql

Header line corrected to respect the ebuild documentation
Pleasure to help</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>cyrius@linog-consulting.com</who>
            <bug_when>2006-02-18 03:32:17 0000</bug_when>
            <thetext>Created an attachment (id=80078)
Ebuild proposal for the 0.7RC1 pam_mysql

Pleasure to help</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>cyrius@linog-consulting.com</who>
            <bug_when>2006-02-18 10:12:12 0000</bug_when>
            <thetext>I had a look on the sasl2 and openssl options.
Ok, it won&apos;t work in this state. 
The configure file search about some directories which don&apos;t exist.
I don&apos;t understand why. So if someone could help ...</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>cyrius@linog-consulting.com</who>
            <bug_when>2006-02-19 09:25:07 0000</bug_when>
            <thetext>Created an attachment (id=80193)
0.6.2 and 0.7_rc1 versions corrected

Hi guys,

   I hope to have corrected thoses version to take in account sasl2 and openssl.
   In fact this module was done on the Debian distrib and never found the necessary includes and c functions to correctly link with ssl or sasl.
   So, i hope to have corectly modified the necessary files.
   

   Would it be possible that someone test it please ?

Cyrius</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>cyrius@linog-consulting.com</who>
            <bug_when>2006-02-19 10:00:09 0000</bug_when>
            <thetext>(From update of attachment 80193)
see bug 123405</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>flameeyes@gentoo.org</who>
            <bug_when>2006-04-21 08:50:18 0000</bug_when>
            <thetext>*** Bug 85787 has been marked as a duplicate of this bug. ***</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>flameeyes@gentoo.org</who>
            <bug_when>2006-04-21 08:57:42 0000</bug_when>
            <thetext>*** Bug 104967 has been marked as a duplicate of this bug. ***</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>flameeyes@gentoo.org</who>
            <bug_when>2006-04-21 09:02:11 0000</bug_when>
            <thetext>*** Bug 123405 has been marked as a duplicate of this bug. ***</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>wmark.gentoo@hurrikane.de</who>
            <bug_when>2006-04-26 05:58:18 0000</bug_when>
            <thetext>Created an attachment (id=85531)
pam_mysql-0.6.0-to-0.6.2.patch

I&apos;d like to contribute this patch against pam_mysql-0.6.0.ebuild.

It not only is a version bump but provides a workaround against the configure bug which prevents headers for MD5 to be found. MD5-support (crypt=3) works.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>wmark.gentoo@hurrikane.de</who>
            <bug_when>2006-04-26 05:59:49 0000</bug_when>
            <thetext>Created an attachment (id=85532)
pam_mysql-0.6_md5_openssl.patch

</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>wmark.gentoo@hurrikane.de</who>
            <bug_when>2006-04-26 06:00:20 0000</bug_when>
            <thetext>Created an attachment (id=85533)
pam_mysql-0.6_md5_sasl2.patch

</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>langthang@gentoo.org</who>
            <bug_when>2006-05-09 12:08:35 0000</bug_when>
            <thetext>quoted from http://pam-mysql.sourceforge.net/News/00005.php

Aressed security concerns:

    *

      Possible segmentation fault in the SQL logging facility, which can cause Denial-of-Service (DoS).
    *

      Flaws in the authentication and authentication token alteration code where incorrect treatment of the pointer returned by pam_get_item() were spotted. They can most likely induce DoS or possibly lead to more severe problems.

security team, please do your check.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>flameeyes@gentoo.org</who>
            <bug_when>2006-05-09 12:20:06 0000</bug_when>
            <thetext>If this is a security concern I&apos;m for masking and asking for a new maintainer on g-dev until someone steps up, and deleted when the case.
</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>jaervosz@gentoo.org</who>
            <bug_when>2006-05-09 13:47:05 0000</bug_when>
            <thetext>Reassgining to security.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>jaervosz@gentoo.org</who>
            <bug_when>2006-05-09 14:02:32 0000</bug_when>
            <thetext>Maintainer mail sent to -dev.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>vivo@gentoo.org</who>
            <bug_when>2006-05-10 03:03:02 0000</bug_when>
            <thetext>pam-mysql 0.7RC1 added to the tree, the package now belong to the &quot;mysql&quot; herd, still need to look in depth at the patches &quot;pam_mysql-0.6_md5_openssl.patch&quot; and &quot;pam_mysql-0.6_md5_sasl2.patch&quot;, these, temporary have _not_ been applyed.

rgds, Francesco Riosa

P.S. I&apos;m using 0.7RC1 from a pair of weeks on amd64</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>dercorny@gentoo.org</who>
            <bug_when>2006-05-10 03:21:14 0000</bug_when>
            <thetext>vivo, is this ready to be stable?</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>vivo@gentoo.org</who>
            <bug_when>2006-05-10 06:52:27 0000</bug_when>
            <thetext>two additional use flag need to be added, &quot;openssl&quot; an &quot;sasl&quot;, but need the usual little modifications to the ebuild and further testing, so better do that in a &quot;-r1&quot;.

As is the package is minimally tested, only amd64, basically I do use it as auth system on a mail-server where sasl+mysql was not an option.

However it compile and run, so yes it&apos;s ready for arch&apos;s tester and stabilization.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>halcy0n@gentoo.org</who>
            <bug_when>2006-05-17 17:32:52 0000</bug_when>
            <thetext>x86 done</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>wmark.gentoo@hurrikane.de</who>
            <bug_when>2006-05-18 03:11:57 0000</bug_when>
            <thetext>Created an attachment (id=86990)
pam_mysql-0.7_rc1.ebuild.md5.patch

Please see the attached patch which addresses the configure bug which prevents headers for MD5 to be found.

The patch is to be applied on the current ebuild.

I&apos;ve already published a complete ebuild here: http://svn.ossdl.de/all/ossdl/
</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>tcort@gentoo.org</who>
            <bug_when>2006-05-18 19:37:24 0000</bug_when>
            <thetext>alpha done.

I noticed 0.5 is stable on ppc, but 0.7_rc1 is still ~ppc. Maybe they should be added to CC to stabilize 0.7_rc1 too?</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>dercorny@gentoo.org</who>
            <bug_when>2006-05-18 23:30:06 0000</bug_when>
            <thetext>ppc please test and stable, thanks. Also thanks to tcort for the headsup</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>cyrius@linog-consulting.com</who>
            <bug_when>2006-05-19 02:03:41 0000</bug_when>
            <thetext>Hello all,

   I&apos;m clearly disapointed and discouraged. I&apos;ve already done this in the 123405 bugg. 
   Then i don&apos;t understand you. Why do you not directly keep those attachments from 123405 and correct them here ????

   I mean using sed like you want and others ?
   Could you explain your position ?
   That&apos;s great to re discover what i&apos;ve already test and done. 


Cyrius
</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>dertobi123@gentoo.org</who>
            <bug_when>2006-05-19 11:56:47 0000</bug_when>
            <thetext>ppc stable</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>falco@gentoo.org</who>
            <bug_when>2006-05-30 05:34:00 0000</bug_when>
            <thetext>[glsa voting]

OK, i shoot first.

i would vote no glsa.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>frilled@gentoo.org</who>
            <bug_when>2006-05-30 05:38:56 0000</bug_when>
            <thetext>Phew. Gut feeling says &quot;no&quot; since I don&apos;t really see a big impact. On the other hand, it&apos;s still valid and we don&apos;t give anything away by doing a GLSA. So why not, in doubt count me as &quot;yes&quot;.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>gentoomail@gmail.com</who>
            <bug_when>2006-05-30 06:07:08 0000</bug_when>
            <thetext>I agree with frilled, why not,
vote yes glsa
rgds
daxomatic</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>koon@gentoo.org</who>
            <bug_when>2006-05-30 09:22:42 0000</bug_when>
            <thetext>Voting yes</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>falco@gentoo.org</who>
            <bug_when>2006-06-08 03:35:14 0000</bug_when>
            <thetext>sec-devs, please vote and decide on this B2-maybe. One &quot;yes&quot; would be sufficient.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>jaervosz@gentoo.org</who>
            <bug_when>2006-06-11 12:23:53 0000</bug_when>
            <thetext>I vote YES.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>frilled@gentoo.org</who>
            <bug_when>2006-06-12 21:11:08 0000</bug_when>
            <thetext>Can we have someone from auditing take a deeper look at what&apos;s described as &quot;or possibly lead to more severe problems&quot; (http://pam-mysql.sourceforge.net/News/), or does somebody know?</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>jaervosz@gentoo.org</who>
            <bug_when>2006-06-15 09:14:51 0000</bug_when>
            <thetext>Thx everyone.

GLSA 200606-18</thetext>
          </long_desc>
      
          <attachment
              isobsolete="1"
              ispatch="0"
              isprivate="0"
          >
            <attachid>80075</attachid>
            <date>2006-02-18 03:11 0000</date>
            <desc>Ebuild proposal for the 0.6.2 pam_mysql</desc>
            <filename>pam_mysql-0.6.2.ebuild</filename>
            <type>application/octet-stream</type>
            <data encoding="base64">IyBDb3B5cmlnaHQgMTk5OS0yMDA2IEdlbnRvbyBGb3VuZGF0aW9uCiMgRGlzdHJpYnV0ZWQgdW5k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</data>        

          </attachment>
          <attachment
              isobsolete="1"
              ispatch="0"
              isprivate="0"
          >
            <attachid>80076</attachid>
            <date>2006-02-18 03:20 0000</date>
            <desc>Ebuild proposal for the 0.6.2 pam_mysql</desc>
            <filename>pam_mysql-0.6.2.ebuild</filename>
            <type>application/octet-stream</type>
            <data encoding="base64">IyBDb3B5cmlnaHQgMTk5OS0yMDA2IEdlbnRvbyBGb3VuZGF0aW9uCiMgRGlzdHJpYnV0ZWQgdW5k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</data>        

          </attachment>
          <attachment
              isobsolete="1"
              ispatch="0"
              isprivate="0"
          >
            <attachid>80078</attachid>
            <date>2006-02-18 03:32 0000</date>
            <desc>Ebuild proposal for the 0.7RC1 pam_mysql</desc>
            <filename>pam_mysql-0.7_rc1.ebuild</filename>
            <type>application/octet-stream</type>
            <data encoding="base64">IyBDb3B5cmlnaHQgMTk5OS0yMDA2IEdlbnRvbyBGb3VuZGF0aW9uCiMgRGlzdHJpYnV0ZWQgdW5k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</data>        

          </attachment>
          <attachment
              isobsolete="1"
              ispatch="0"
              isprivate="0"
          >
            <attachid>80193</attachid>
            <date>2006-02-19 09:25 0000</date>
            <desc>0.6.2 and 0.7_rc1 versions corrected</desc>
            <filename>pam_mysql.tar.bz2</filename>
            <type>application/octet-stream</type>
            <data encoding="base64">QlpoOTFBWSZTWWjfN0EABkZ/zf+0REB9/////+/////v//8gAAAwAASAIAAIYBE/eqABQAAAB69N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</data>        

          </attachment>
          <attachment
              isobsolete="1"
              ispatch="1"
              isprivate="0"
          >
            <attachid>85531</attachid>
            <date>2006-04-26 05:58 0000</date>
            <desc>pam_mysql-0.6.0-to-0.6.2.patch</desc>
            <filename>pam_mysql-0.6.0-to-0.6.2.patch</filename>
            <type>text/plain</type>
            <data encoding="base64">LS0tIC91c3IvcG9ydGFnZS9zeXMtYXV0aC9wYW1fbXlzcWwvcGFtX215c3FsLTAuNi4wLmVidWls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</data>        

          </attachment>
          <attachment
              isobsolete="1"
              ispatch="1"
              isprivate="0"
          >
            <attachid>85532</attachid>
            <date>2006-04-26 05:59 0000</date>
            <desc>pam_mysql-0.6_md5_openssl.patch</desc>
            <filename>pam_mysql-0.6_md5_openssl.patch</filename>
            <type>text/plain</type>
            <data encoding="base64">LS0tIE1ha2VmaWxlCTIwMDYtMDQtMjMgMTg6MDY6MTAuNTAzNzUxMjUwICswMjAwCisrKyBNYWtl
ZmlsZQkyMDA2LTA0LTIzIDE4OjA2OjQ2LjA4OTk3NTI1MCArMDIwMApAQCAtMTA2LDcgKzEwNiw3
IEBACiBMVExJQlJBUklFUyA9ICAkKGxpYl9MVExJQlJBUklFUykKIAogCi1ERUZTID0gLURIQVZF
X0NPTkZJR19IIC1JLiAtSSQoc3JjZGlyKSAtSS4KK0RFRlMgPSAtREhBVkVfT1BFTlNTTCAtREhB
VkVfQ09ORklHX0ggLUkuIC1JJChzcmNkaXIpIC1JLgogQ1BQRkxBR1MgPSAKIExERkxBR1MgPSAK
IExJQlMgPSAgLUwvdXNyL2xpYi9teXNxbCAtbG15c3FsY2xpZW50IC1seiAtbGNyeXB0IC1sbnNs
IC1sbSAtbHNzbCAtbGNyeXB0byAtbGRsICAgICAtbGNyeXB0Cg==
</data>        

          </attachment>
          <attachment
              isobsolete="1"
              ispatch="1"
              isprivate="0"
          >
            <attachid>85533</attachid>
            <date>2006-04-26 06:00 0000</date>
            <desc>pam_mysql-0.6_md5_sasl2.patch</desc>
            <filename>pam_mysql-0.6_md5_sasl2.patch</filename>
            <type>text/plain</type>
            <data encoding="base64">LS0tIE1ha2VmaWxlCTIwMDYtMDQtMjMgMTg6MDY6MTAuNTAzNzUxMjUwICswMjAwCisrKyBNYWtl
ZmlsZQkyMDA2LTA0LTIzIDE4OjA2OjQ2LjA4OTk3NTI1MCArMDIwMApAQCAtMTA2LDcgKzEwNiw3
IEBACiBMVExJQlJBUklFUyA9ICAkKGxpYl9MVExJQlJBUklFUykKIAogCi1ERUZTID0gLURIQVZF
X0NPTkZJR19IIC1JLiAtSSQoc3JjZGlyKSAtSS4KK0RFRlMgPSAtREhBVkVfU0FTTF9NRDVfSCAt
REhBVkVfQ1lSVVNfU0FTTF9WMiAtREhBVkVfQ09ORklHX0ggLUkuIC1JJChzcmNkaXIpIC1JLgog
Q1BQRkxBR1MgPSAKIExERkxBR1MgPSAKIExJQlMgPSAgLUwvdXNyL2xpYi9teXNxbCAtbG15c3Fs
Y2xpZW50IC1seiAtbGNyeXB0IC1sbnNsIC1sbSAtbHNzbCAtbGNyeXB0byAtbGRsICAgICAtbGNy
eXB0Cg==
</data>        

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>86990</attachid>
            <date>2006-05-18 03:11 0000</date>
            <desc>pam_mysql-0.7_rc1.ebuild.md5.patch</desc>
            <filename>pam_mysql-0.7_rc1.ebuild.md5.patch</filename>
            <type>text/plain</type>
            <data encoding="base64">LS0tIC91c3IvcG9ydGFnZS9zeXMtYXV0aC9wYW1fbXlzcWwvcGFtX215c3FsLTAuN19yYzEuZWJ1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==
</data>        

          </attachment>
    </bug>

</bugzilla>