[MBT] new ticket for pkg pam "pam_xauth module and su"

[bugs at pld.org.pl]

Date: 2003-02-28 16:14:56+01	Author:  (kreutzm) <kreutzm at itp.uni-hannover.de> 
Title:         pam_xauth module and su
Ticket ID:     #586
Ticket URL:    http://bugs.pld.org.pl/?bug=586
Package:       pam-0.75.8-2
Distribution:  PLD-Ra.main
Category:      security problem
Current state: opened
Text:

I am *extremly* unsure if this bug is present in PLD. 

I tried an attac along the lines of
http://marc.theaimsgroup.com/?l=bugtraq&m=104431622818954&w=2

but were unsucessfull, but this might be because of my inability to handle X cookies properly.

This is CAN-2002-1160

Nevertheless I don't think the patch will hurt after all (after reading the description !)