Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
3.3
CVSSv2

CVE-2010-3316

Published: 24/01/2011 Updated: 13/02/2023
CVSS v2 Base Score: 3.3 | Impact Score: 4.9 | Exploitability Score: 3.4
VMScore: 294
Vector: AV:L/AC:M/Au:N/C:P/I:P/A:N
Subscribe to Linux-pam

Vulnerability Summary

The run_coprocess function in pam_xauth.c in the pam_xauth module in Linux-PAM (aka pam) prior to 1.1.2 does not check the return values of the setuid, setgid, and setgroups system calls, which might allow local users to read arbitrary files by executing a program that relies on the pam_xauth PAM check.

Vulnerable Product Search on Vulmon Subscribe to Product

linux-pam linux-pam 0.99.1.0

linux-pam linux-pam 0.99.2.0

linux-pam linux-pam 0.99.2.1

linux-pam linux-pam 0.99.3.0

linux-pam linux-pam 0.99.4.0

linux-pam linux-pam 0.99.5.0

linux-pam linux-pam 0.99.6.0

linux-pam linux-pam 0.99.6.1

linux-pam linux-pam 0.99.6.2

linux-pam linux-pam 0.99.6.3

linux-pam linux-pam 0.99.7.0

linux-pam linux-pam 0.99.7.1

linux-pam linux-pam 0.99.8.0

linux-pam linux-pam 0.99.8.1

linux-pam linux-pam 0.99.9.0

linux-pam linux-pam 0.99.10.0

linux-pam linux-pam 1.0.0

linux-pam linux-pam 1.0.1

linux-pam linux-pam 1.0.2

linux-pam linux-pam 1.0.3

linux-pam linux-pam 1.0.4

linux-pam linux-pam 1.1.0

linux-pam linux-pam

Vendor Advisories

Debian CVElist Bug Report Logs: CVE-2010-3316 CVE-2010-3430 CVE-2010-3431 CVE-2010-3435
Debian Bug report logs - #599832 CVE-2010-3316 CVE-2010-3430 CVE-2010-3431 CVE-2010-3435 Package: pam; Maintainer for pam is Steve Langasek <vorlon@debianorg>; Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Mon, 11 Oct 2010 17:54:05 UTC Severity: important Tags: security Fixed in version pam/113-1 Done: ...
Debian CVElist Bug Report Logs: CVE-2010-3853: pam_namespace executes namespace.init with service's environment
Debian Bug report logs - #608273 CVE-2010-3853: pam_namespace executes namespaceinit with service's environment Package: pam; Maintainer for pam is Steve Langasek <vorlon@debianorg>; Reported by: Giuseppe Iuculano <iuculano@debianorg> Date: Wed, 29 Dec 2010 15:18:02 UTC Severity: serious Tags: patch, security Fix ...
Ubuntu Security Notice: pam vulnerabilities
An attacker could cause PAM to read or delete arbitrary files or cause it to crash ...
Ubuntu Security Notice: pam regression
The USN-1140-1 PAM update caused cron to stop working ...

References

NVD-CWE-Otherhttp://openwall.com/lists/oss-security/2010/09/27/5http://openwall.com/lists/oss-security/2010/09/21/8http://openwall.com/lists/oss-security/2010/09/21/3http://www.openwall.com/lists/oss-security/2010/09/24/2http://openwall.com/lists/oss-security/2010/09/27/10http://www.redhat.com/support/errata/RHSA-2010-0891.htmlhttp://openwall.com/lists/oss-security/2010/09/27/4https://bugzilla.redhat.com/show_bug.cgi?id=637898http://openwall.com/lists/oss-security/2010/10/25/2https://sourceforge.net/tracker/?func=detail&aid=3028213&group_id=6663&atid=106663http://openwall.com/lists/oss-security/2010/09/27/7http://www.redhat.com/support/errata/RHSA-2010-0819.htmlhttp://openwall.com/lists/oss-security/2010/08/16/2http://www.mandriva.com/security/advisories?name=MDVSA-2010:220http://lists.vmware.com/pipermail/security-announce/2011/000126.htmlhttp://www.vmware.com/security/advisories/VMSA-2011-0004.htmlhttp://www.vupen.com/english/advisories/2011/0606http://security.gentoo.org/glsa/glsa-201206-31.xmlhttp://secunia.com/advisories/49711http://www.securityfocus.com/archive/1/516909/100/0/threadedhttp://git.altlinux.org/people/ldv/packages/?p=pam.git%3Ba=commit%3Bh=06f882f30092a39a1db867c9744b2ca8d60e4ad6https://nvd.nist.govhttps://bugs.debian.org/cgi-bin/bugreport.cgi?bug=599832https://usn.ubuntu.com/1140-1/
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3581reflected XSSCVE-2024-26925CVE-2024-27956LFICVE-2024-3607CVE-2024-3107CVE-2024-3295SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook