ByteOS Network

Vulnerability Details :

CVE-2010-3431

Assigner-redhat

Assigner Org ID-53f830b8-0a3f-465b-8143-3b8a9948e749

Published At-24 Jan, 2011 | 17:00

Updated At-07 Aug, 2024 | 03:11

The privilege-dropping implementation in the (1) pam_env and (2) pam_mail modules in Linux-PAM (aka pam) 1.1.2 does not check the return value of the setfsuid system call, which might allow local users to obtain sensitive information by leveraging an unintended uid, as demonstrated by a symlink attack on the .pam_environment file in a user's home directory. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-3435.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:redhat

Assigner Org ID:53f830b8-0a3f-465b-8143-3b8a9948e749

Published At:24 Jan, 2011 | 17:00

Updated At:07 Aug, 2024 | 03:11

▼CVE Numbering Authority (CNA)

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://openwall.com/lists/oss-security/2010/09/27/5	mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2010/09/21/3	mailing-list x_refsource_MLIST
http://security.gentoo.org/glsa/glsa-201206-31.xml	vendor-advisory x_refsource_GENTOO
http://openwall.com/lists/oss-security/2010/10/03/1	mailing-list x_refsource_MLIST
http://www.openwall.com/lists/oss-security/2010/09/24/2	mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2010/09/21/9	mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2010/09/21/8	mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2010/09/27/10	mailing-list x_refsource_MLIST
http://git.altlinux.org/people/ldv/packages/?p=pam.git%3Ba=commit%3Bh=843807a3a90f52e7538be756616510730a24739a	x_refsource_CONFIRM
http://openwall.com/lists/oss-security/2010/09/27/4	mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2010/09/21/10	mailing-list x_refsource_MLIST
http://secunia.com/advisories/49711	third-party-advisory x_refsource_SECUNIA
https://bugzilla.redhat.com/show_bug.cgi?id=641361	x_refsource_CONFIRM
http://openwall.com/lists/oss-security/2010/09/27/7	mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2010/10/25/2	mailing-list x_refsource_MLIST
http://www.openwall.com/lists/oss-security/2010/09/21/11	mailing-list x_refsource_MLIST

Hyperlink: http://openwall.com/lists/oss-security/2010/09/27/5

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://openwall.com/lists/oss-security/2010/09/21/3

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://security.gentoo.org/glsa/glsa-201206-31.xml

Resource:

vendor-advisory

x_refsource_GENTOO

Hyperlink: http://openwall.com/lists/oss-security/2010/10/03/1

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://www.openwall.com/lists/oss-security/2010/09/24/2

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://openwall.com/lists/oss-security/2010/09/21/9

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://openwall.com/lists/oss-security/2010/09/21/8

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://openwall.com/lists/oss-security/2010/09/27/10

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://git.altlinux.org/people/ldv/packages/?p=pam.git%3Ba=commit%3Bh=843807a3a90f52e7538be756616510730a24739a

Resource:

x_refsource_CONFIRM

Hyperlink: http://openwall.com/lists/oss-security/2010/09/27/4

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://openwall.com/lists/oss-security/2010/09/21/10

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://secunia.com/advisories/49711

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=641361

Resource:

x_refsource_CONFIRM

Hyperlink: http://openwall.com/lists/oss-security/2010/09/27/7

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://openwall.com/lists/oss-security/2010/10/25/2

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://www.openwall.com/lists/oss-security/2010/09/21/11

Resource:

mailing-list

x_refsource_MLIST

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://openwall.com/lists/oss-security/2010/09/27/5	mailing-list x_refsource_MLIST x_transferred
http://openwall.com/lists/oss-security/2010/09/21/3	mailing-list x_refsource_MLIST x_transferred
http://security.gentoo.org/glsa/glsa-201206-31.xml	vendor-advisory x_refsource_GENTOO x_transferred
http://openwall.com/lists/oss-security/2010/10/03/1	mailing-list x_refsource_MLIST x_transferred
http://www.openwall.com/lists/oss-security/2010/09/24/2	mailing-list x_refsource_MLIST x_transferred
http://openwall.com/lists/oss-security/2010/09/21/9	mailing-list x_refsource_MLIST x_transferred
http://openwall.com/lists/oss-security/2010/09/21/8	mailing-list x_refsource_MLIST x_transferred
http://openwall.com/lists/oss-security/2010/09/27/10	mailing-list x_refsource_MLIST x_transferred
http://git.altlinux.org/people/ldv/packages/?p=pam.git%3Ba=commit%3Bh=843807a3a90f52e7538be756616510730a24739a	x_refsource_CONFIRM x_transferred
http://openwall.com/lists/oss-security/2010/09/27/4	mailing-list x_refsource_MLIST x_transferred
http://openwall.com/lists/oss-security/2010/09/21/10	mailing-list x_refsource_MLIST x_transferred
http://secunia.com/advisories/49711	third-party-advisory x_refsource_SECUNIA x_transferred
https://bugzilla.redhat.com/show_bug.cgi?id=641361	x_refsource_CONFIRM x_transferred
http://openwall.com/lists/oss-security/2010/09/27/7	mailing-list x_refsource_MLIST x_transferred
http://openwall.com/lists/oss-security/2010/10/25/2	mailing-list x_refsource_MLIST x_transferred
http://www.openwall.com/lists/oss-security/2010/09/21/11	mailing-list x_refsource_MLIST x_transferred

Hyperlink: http://openwall.com/lists/oss-security/2010/09/27/5

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: http://openwall.com/lists/oss-security/2010/09/21/3

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: http://security.gentoo.org/glsa/glsa-201206-31.xml

Resource:

vendor-advisory

x_refsource_GENTOO

x_transferred

Hyperlink: http://openwall.com/lists/oss-security/2010/10/03/1

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: http://www.openwall.com/lists/oss-security/2010/09/24/2

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: http://openwall.com/lists/oss-security/2010/09/21/9

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: http://openwall.com/lists/oss-security/2010/09/21/8

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: http://openwall.com/lists/oss-security/2010/09/27/10

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: http://git.altlinux.org/people/ldv/packages/?p=pam.git%3Ba=commit%3Bh=843807a3a90f52e7538be756616510730a24739a

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://openwall.com/lists/oss-security/2010/09/27/4

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: http://openwall.com/lists/oss-security/2010/09/21/10

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: http://secunia.com/advisories/49711

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=641361

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://openwall.com/lists/oss-security/2010/09/27/7

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: http://openwall.com/lists/oss-security/2010/10/25/2

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: http://www.openwall.com/lists/oss-security/2010/09/21/11

Resource:

mailing-list

x_refsource_MLIST

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:secalert@redhat.com

Published At:24 Jan, 2011 | 18:00

Updated At:11 Apr, 2025 | 00:51

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	1.9	LOW	AV:L/AC:M/Au:N/C:P/I:N/A:N
Primary	2.0	1.9	LOW	AV:L/AC:M/Au:N/C:P/I:N/A:N

Type: Primary

Version: 2.0

Base score: 1.9

Base severity: LOW

Vector:

AV:L/AC:M/Au:N/C:P/I:N/A:N

Type: Primary

Version: 2.0

Base score: 1.9

Base severity: LOW

Vector:

AV:L/AC:M/Au:N/C:P/I:N/A:N

CPE Matches

linux-pam>>linux-pam>>1.1.2

cpe:2.3:a:linux-pam:linux-pam:1.1.2:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-Other	Primary	nvd@nist.gov

CWE ID: NVD-CWE-Other

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://git.altlinux.org/people/ldv/packages/?p=pam.git%3Ba=commit%3Bh=843807a3a90f52e7538be756616510730a24739a	secalert@redhat.com	N/A
http://openwall.com/lists/oss-security/2010/09/21/10	secalert@redhat.com	Patch
http://openwall.com/lists/oss-security/2010/09/21/3	secalert@redhat.com	Patch
http://openwall.com/lists/oss-security/2010/09/21/8	secalert@redhat.com	Patch
http://openwall.com/lists/oss-security/2010/09/21/9	secalert@redhat.com	N/A
http://openwall.com/lists/oss-security/2010/09/27/10	secalert@redhat.com	N/A
http://openwall.com/lists/oss-security/2010/09/27/4	secalert@redhat.com	Patch
http://openwall.com/lists/oss-security/2010/09/27/5	secalert@redhat.com	N/A
http://openwall.com/lists/oss-security/2010/09/27/7	secalert@redhat.com	N/A
http://openwall.com/lists/oss-security/2010/10/03/1	secalert@redhat.com	Patch
http://openwall.com/lists/oss-security/2010/10/25/2	secalert@redhat.com	Patch
http://secunia.com/advisories/49711	secalert@redhat.com	N/A
http://security.gentoo.org/glsa/glsa-201206-31.xml	secalert@redhat.com	N/A
http://www.openwall.com/lists/oss-security/2010/09/21/11	secalert@redhat.com	Patch
http://www.openwall.com/lists/oss-security/2010/09/24/2	secalert@redhat.com	N/A
https://bugzilla.redhat.com/show_bug.cgi?id=641361	secalert@redhat.com	Patch
http://git.altlinux.org/people/ldv/packages/?p=pam.git%3Ba=commit%3Bh=843807a3a90f52e7538be756616510730a24739a	af854a3a-2127-422b-91ae-364da2661108	N/A
http://openwall.com/lists/oss-security/2010/09/21/10	af854a3a-2127-422b-91ae-364da2661108	Patch
http://openwall.com/lists/oss-security/2010/09/21/3	af854a3a-2127-422b-91ae-364da2661108	Patch
http://openwall.com/lists/oss-security/2010/09/21/8	af854a3a-2127-422b-91ae-364da2661108	Patch
http://openwall.com/lists/oss-security/2010/09/21/9	af854a3a-2127-422b-91ae-364da2661108	N/A
http://openwall.com/lists/oss-security/2010/09/27/10	af854a3a-2127-422b-91ae-364da2661108	N/A
http://openwall.com/lists/oss-security/2010/09/27/4	af854a3a-2127-422b-91ae-364da2661108	Patch
http://openwall.com/lists/oss-security/2010/09/27/5	af854a3a-2127-422b-91ae-364da2661108	N/A
http://openwall.com/lists/oss-security/2010/09/27/7	af854a3a-2127-422b-91ae-364da2661108	N/A
http://openwall.com/lists/oss-security/2010/10/03/1	af854a3a-2127-422b-91ae-364da2661108	Patch
http://openwall.com/lists/oss-security/2010/10/25/2	af854a3a-2127-422b-91ae-364da2661108	Patch
http://secunia.com/advisories/49711	af854a3a-2127-422b-91ae-364da2661108	N/A
http://security.gentoo.org/glsa/glsa-201206-31.xml	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.openwall.com/lists/oss-security/2010/09/21/11	af854a3a-2127-422b-91ae-364da2661108	Patch
http://www.openwall.com/lists/oss-security/2010/09/24/2	af854a3a-2127-422b-91ae-364da2661108	N/A
https://bugzilla.redhat.com/show_bug.cgi?id=641361	af854a3a-2127-422b-91ae-364da2661108	Patch