Vulnerability Details : CVE-2013-7322
usersfile.c in liboath in OATH Toolkit before 2.4.1 does not properly handle lines containing an invalid one-time-password (OTP) type and a user name in /etc/users.oath, which causes the wrong line to be updated when invalidating an OTP and allows context-dependent attackers to conduct replay attacks, as demonstrated by a commented out line when using libpam-oath.
Vulnerability category: BypassGain privilege
Products affected by CVE-2013-7322
- cpe:2.3:a:nongnu:oath_toolkit:*:*:*:*:*:*:*:*
- cpe:2.3:a:nongnu:oath_toolkit:2.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:nongnu:oath_toolkit:2.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:nongnu:oath_toolkit:1.12.0:*:*:*:*:*:*:*
- cpe:2.3:a:nongnu:oath_toolkit:1.10.5:*:*:*:*:*:*:*
- cpe:2.3:a:nongnu:oath_toolkit:1.8.1:*:*:*:*:*:*:*
- cpe:2.3:a:nongnu:oath_toolkit:1.8.0:*:*:*:*:*:*:*
- cpe:2.3:a:nongnu:oath_toolkit:1.4.5:*:*:*:*:*:*:*
- cpe:2.3:a:nongnu:oath_toolkit:1.4.4:*:*:*:*:*:*:*
- cpe:2.3:a:nongnu:oath_toolkit:1.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:nongnu:oath_toolkit:1.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:nongnu:oath_toolkit:2.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:nongnu:oath_toolkit:1.12.6:*:*:*:*:*:*:*
- cpe:2.3:a:nongnu:oath_toolkit:1.10.4:*:*:*:*:*:*:*
- cpe:2.3:a:nongnu:oath_toolkit:1.10.3:*:*:*:*:*:*:*
- cpe:2.3:a:nongnu:oath_toolkit:1.6.4:*:*:*:*:*:*:*
- cpe:2.3:a:nongnu:oath_toolkit:1.6.3:*:*:*:*:*:*:*
- cpe:2.3:a:nongnu:oath_toolkit:1.4.3:*:*:*:*:*:*:*
- cpe:2.3:a:nongnu:oath_toolkit:1.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:nongnu:oath_toolkit:1.12.5:*:*:*:*:*:*:*
- cpe:2.3:a:nongnu:oath_toolkit:1.12.4:*:*:*:*:*:*:*
- cpe:2.3:a:nongnu:oath_toolkit:1.12.3:*:*:*:*:*:*:*
- cpe:2.3:a:nongnu:oath_toolkit:1.10.2:*:*:*:*:*:*:*
- cpe:2.3:a:nongnu:oath_toolkit:1.10.1:*:*:*:*:*:*:*
- cpe:2.3:a:nongnu:oath_toolkit:1.6.2:*:*:*:*:*:*:*
- cpe:2.3:a:nongnu:oath_toolkit:1.6.1:*:*:*:*:*:*:*
- cpe:2.3:a:nongnu:oath_toolkit:1.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:nongnu:oath_toolkit:1.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:nongnu:oath_toolkit:1.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:nongnu:oath_toolkit:2.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:nongnu:oath_toolkit:1.12.2:*:*:*:*:*:*:*
- cpe:2.3:a:nongnu:oath_toolkit:1.12.1:*:*:*:*:*:*:*
- cpe:2.3:a:nongnu:oath_toolkit:1.10.0:*:*:*:*:*:*:*
- cpe:2.3:a:nongnu:oath_toolkit:1.8.2:*:*:*:*:*:*:*
- cpe:2.3:a:nongnu:oath_toolkit:1.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:nongnu:oath_toolkit:1.4.6:*:*:*:*:*:*:*
- cpe:2.3:a:nongnu:oath_toolkit:1.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:nongnu:oath_toolkit:1.2.0:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2013-7322
0.38%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 57 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2013-7322
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.9
|
MEDIUM | AV:N/AC:M/Au:S/C:P/I:P/A:N |
6.8
|
4.9
|
NIST |
CWE ids for CVE-2013-7322
-
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.Assigned by: nvd@nist.gov (Primary)
References for CVE-2013-7322
-
http://lists.nongnu.org/archive/html/oath-toolkit-help/2013-12/msg00003.html
Re: [OATH-Toolkit-help] libpam-oath vulnerable to replay of OTP as res
-
http://seclists.org/oss-sec/2014/q1/296
oss-sec: Re: oath-toolkit PAM module OTP token invalidation issue
-
http://www.nongnu.org/oath-toolkit/NEWS.html
OATH Toolkit NEWS
-
http://lists.nongnu.org/archive/html/oath-toolkit-help/2013-12/msg00000.html
[OATH-Toolkit-help] libpam-oath vulnerable to replay of OTP as result of
-
http://lists.nongnu.org/archive/html/oath-toolkit-help/2013-12/msg00002.html
Re: [OATH-Toolkit-help] libpam-oath vulnerable to replay of OTP as resul
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/91316
OATH Toolkit libpam-oath replay CVE-2013-7322 Vulnerability Report
Jump to