CVE-2010-3435
pam: pam_env and pam_mail accessing users' file with root privileges
Severity Score
4.7
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The (1) pam_env and (2) pam_mail modules in Linux-PAM (aka pam) before 1.1.2 use root privileges during read access to files and directories that belong to arbitrary user accounts, which might allow local users to obtain sensitive information by leveraging this filesystem activity, as demonstrated by a symlink attack on the .pam_environment file in a user's home directory.
Los módulos pam_env (1) y (2) pam_mail de Linux-PAM en versiones anteriores a v1.1.2 utiliza privilegios de root durante el acceso de lectura a los archivos y directorios que pertenecen a cuentas de usuario arbitrarias, lo que podría permitir a usuarios locales obtener información sensible de aprovechando esta actividad en el sistema de archivos, como se demuestra por un ataque de enlace simbólico en el archivo pam_environment. en el directorio home del usuario.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2010-09-17 CVE Reserved
- 2010-11-05 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (20)
| URL | Tag | Source |
|---|---|---|
| http://git.altlinux.org/people/ldv/packages/?p=pam.git%3Ba=commit%3Bh=06f882f30092a39a1db867c9744b2ca8d60e4ad6 | X_refsource_confirm | |
| http://lists.vmware.com/pipermail/security-announce/2011/000126.html | Mailing List | |
| http://openwall.com/lists/oss-security/2010/09/27/10 | Mailing List | |
| http://openwall.com/lists/oss-security/2010/09/27/8 | Mailing List | |
| http://secunia.com/advisories/49711 | Third Party Advisory | |
| http://www.openwall.com/lists/oss-security/2010/09/24/2 | Mailing List |
|
| http://www.securityfocus.com/archive/1/516909/100/0/threaded | Mailing List | |
| http://www.vmware.com/security/advisories/VMSA-2011-0004.html | X_refsource_confirm | |
| http://www.vupen.com/english/advisories/2011/0606 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://openwall.com/lists/oss-security/2010/09/21/3 | 2023-02-13 | |
| http://openwall.com/lists/oss-security/2010/09/27/4 | 2023-02-13 | |
| http://openwall.com/lists/oss-security/2010/09/27/5 | 2023-02-13 | |
| http://openwall.com/lists/oss-security/2010/09/27/7 | 2023-02-13 | |
| http://openwall.com/lists/oss-security/2010/10/25/2 | 2023-02-13 | |
| https://bugzilla.redhat.com/show_bug.cgi?id=641335 | 2010-11-16 |
| URL | Date | SRC |
|---|---|---|
| http://security.gentoo.org/glsa/glsa-201206-31.xml | 2023-02-13 | |
| http://www.mandriva.com/security/advisories?name=MDVSA-2010:220 | 2023-02-13 | |
| http://www.redhat.com/support/errata/RHSA-2010-0819.html | 2023-02-13 | |
| http://www.redhat.com/support/errata/RHSA-2010-0891.html | 2023-02-13 | |
| https://access.redhat.com/security/cve/CVE-2010-3435 | 2010-11-16 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Linux-pam Search vendor "Linux-pam" | Linux-pam Search vendor "Linux-pam" for product "Linux-pam" | <= 1.1.1 Search vendor "Linux-pam" for product "Linux-pam" and version " <= 1.1.1" | - |
Affected
| ||||||
| Linux-pam Search vendor "Linux-pam" | Linux-pam Search vendor "Linux-pam" for product "Linux-pam" | 0.99.1.0 Search vendor "Linux-pam" for product "Linux-pam" and version "0.99.1.0" | - |
Affected
| ||||||
| Linux-pam Search vendor "Linux-pam" | Linux-pam Search vendor "Linux-pam" for product "Linux-pam" | 0.99.2.0 Search vendor "Linux-pam" for product "Linux-pam" and version "0.99.2.0" | - |
Affected
| ||||||
| Linux-pam Search vendor "Linux-pam" | Linux-pam Search vendor "Linux-pam" for product "Linux-pam" | 0.99.2.1 Search vendor "Linux-pam" for product "Linux-pam" and version "0.99.2.1" | - |
Affected
| ||||||
| Linux-pam Search vendor "Linux-pam" | Linux-pam Search vendor "Linux-pam" for product "Linux-pam" | 0.99.3.0 Search vendor "Linux-pam" for product "Linux-pam" and version "0.99.3.0" | - |
Affected
| ||||||
| Linux-pam Search vendor "Linux-pam" | Linux-pam Search vendor "Linux-pam" for product "Linux-pam" | 0.99.4.0 Search vendor "Linux-pam" for product "Linux-pam" and version "0.99.4.0" | - |
Affected
| ||||||
| Linux-pam Search vendor "Linux-pam" | Linux-pam Search vendor "Linux-pam" for product "Linux-pam" | 0.99.5.0 Search vendor "Linux-pam" for product "Linux-pam" and version "0.99.5.0" | - |
Affected
| ||||||
| Linux-pam Search vendor "Linux-pam" | Linux-pam Search vendor "Linux-pam" for product "Linux-pam" | 0.99.6.0 Search vendor "Linux-pam" for product "Linux-pam" and version "0.99.6.0" | - |
Affected
| ||||||
| Linux-pam Search vendor "Linux-pam" | Linux-pam Search vendor "Linux-pam" for product "Linux-pam" | 0.99.6.1 Search vendor "Linux-pam" for product "Linux-pam" and version "0.99.6.1" | - |
Affected
| ||||||
| Linux-pam Search vendor "Linux-pam" | Linux-pam Search vendor "Linux-pam" for product "Linux-pam" | 0.99.6.2 Search vendor "Linux-pam" for product "Linux-pam" and version "0.99.6.2" | - |
Affected
| ||||||
| Linux-pam Search vendor "Linux-pam" | Linux-pam Search vendor "Linux-pam" for product "Linux-pam" | 0.99.6.3 Search vendor "Linux-pam" for product "Linux-pam" and version "0.99.6.3" | - |
Affected
| ||||||
| Linux-pam Search vendor "Linux-pam" | Linux-pam Search vendor "Linux-pam" for product "Linux-pam" | 0.99.7.0 Search vendor "Linux-pam" for product "Linux-pam" and version "0.99.7.0" | - |
Affected
| ||||||
| Linux-pam Search vendor "Linux-pam" | Linux-pam Search vendor "Linux-pam" for product "Linux-pam" | 0.99.7.1 Search vendor "Linux-pam" for product "Linux-pam" and version "0.99.7.1" | - |
Affected
| ||||||
| Linux-pam Search vendor "Linux-pam" | Linux-pam Search vendor "Linux-pam" for product "Linux-pam" | 0.99.8.0 Search vendor "Linux-pam" for product "Linux-pam" and version "0.99.8.0" | - |
Affected
| ||||||
| Linux-pam Search vendor "Linux-pam" | Linux-pam Search vendor "Linux-pam" for product "Linux-pam" | 0.99.8.1 Search vendor "Linux-pam" for product "Linux-pam" and version "0.99.8.1" | - |
Affected
| ||||||
| Linux-pam Search vendor "Linux-pam" | Linux-pam Search vendor "Linux-pam" for product "Linux-pam" | 0.99.9.0 Search vendor "Linux-pam" for product "Linux-pam" and version "0.99.9.0" | - |
Affected
| ||||||
| Linux-pam Search vendor "Linux-pam" | Linux-pam Search vendor "Linux-pam" for product "Linux-pam" | 0.99.10.0 Search vendor "Linux-pam" for product "Linux-pam" and version "0.99.10.0" | - |
Affected
| ||||||
| Linux-pam Search vendor "Linux-pam" | Linux-pam Search vendor "Linux-pam" for product "Linux-pam" | 1.0.0 Search vendor "Linux-pam" for product "Linux-pam" and version "1.0.0" | - |
Affected
| ||||||
| Linux-pam Search vendor "Linux-pam" | Linux-pam Search vendor "Linux-pam" for product "Linux-pam" | 1.0.1 Search vendor "Linux-pam" for product "Linux-pam" and version "1.0.1" | - |
Affected
| ||||||
| Linux-pam Search vendor "Linux-pam" | Linux-pam Search vendor "Linux-pam" for product "Linux-pam" | 1.0.2 Search vendor "Linux-pam" for product "Linux-pam" and version "1.0.2" | - |
Affected
| ||||||
| Linux-pam Search vendor "Linux-pam" | Linux-pam Search vendor "Linux-pam" for product "Linux-pam" | 1.0.3 Search vendor "Linux-pam" for product "Linux-pam" and version "1.0.3" | - |
Affected
| ||||||
| Linux-pam Search vendor "Linux-pam" | Linux-pam Search vendor "Linux-pam" for product "Linux-pam" | 1.0.4 Search vendor "Linux-pam" for product "Linux-pam" and version "1.0.4" | - |
Affected
| ||||||
| Linux-pam Search vendor "Linux-pam" | Linux-pam Search vendor "Linux-pam" for product "Linux-pam" | 1.1.0 Search vendor "Linux-pam" for product "Linux-pam" and version "1.1.0" | - |
Affected
| ||||||