Secunia

A security issue has been reported in SELinux, which potentially can be exploited by malicious, local users to bypass certain security restrictions.

The security issue is caused due to "unix_chkpwd" failing to prevent any attempts to use it to guess other users' passwords when SELinux is enabled without an appropriately configured policy. Failed guess attempts are also not logged. This can potentially be exploited by malicious users to brute-force the passwords of other accounts.

Successful exploitation requires that the policy allows "unix_chkpwd" to be run by non-privileged users.

Solution
Grant only trusted users access to affected systems.
Further details available in Customer Area

Provided and/or discovered by
Tomas Mraz

Original Advisory
Red Hat Bugzilla:
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=168180

Deep Links
Links available in Customer Area