CVEvulnerability

CVE-2010-3431

1.9 LOW Published 2011-01-24 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2011-01-24
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 1.9 LOW — AV:L/AC:M/Au:N/C:P/I:N/A:N

Description

The privilege-dropping implementation in the (1) pam_env and (2) pam_mail modules in Linux-PAM (aka pam) 1.1.2 does not check the return value of the setfsuid system call, which might allow local users to obtain sensitive information by leveraging an unintended uid, as demonstrated by a symlink attack on the .pam_environment file in a user's home directory. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-3435.

Affected configurations

• linux-pam linux-pam 1.1.2

References

http://git.altlinux.org/people/ldv/packages/?p=pam.git%3Ba=commit%3Bh=843807a3a90f52e7538be756616510730a24739a git.altlinux.org
http://openwall.com/lists/oss-security/2010/09/21/10 Patch
http://openwall.com/lists/oss-security/2010/09/21/3 Patch
http://openwall.com/lists/oss-security/2010/09/21/8 Patch
http://openwall.com/lists/oss-security/2010/09/21/9 openwall.com
http://openwall.com/lists/oss-security/2010/09/27/10 openwall.com
http://openwall.com/lists/oss-security/2010/09/27/4 Patch
http://openwall.com/lists/oss-security/2010/09/27/5 openwall.com
http://openwall.com/lists/oss-security/2010/09/27/7 openwall.com
http://openwall.com/lists/oss-security/2010/10/03/1 Patch
http://openwall.com/lists/oss-security/2010/10/25/2 Patch
http://secunia.com/advisories/49711 secunia.com
http://security.gentoo.org/glsa/glsa-201206-31.xml security.gentoo.org
http://www.openwall.com/lists/oss-security/2010/09/21/11 Patch
http://www.openwall.com/lists/oss-security/2010/09/24/2 www.openwall.com
https://bugzilla.redhat.com/show_bug.cgi?id=641361 Patch
http://git.altlinux.org/people/ldv/packages/?p=pam.git%3Ba=commit%3Bh=843807a3a90f52e7538be756616510730a24739a git.altlinux.org
http://openwall.com/lists/oss-security/2010/09/21/10 Patch
http://openwall.com/lists/oss-security/2010/09/21/3 Patch
http://openwall.com/lists/oss-security/2010/09/21/8 Patch
http://openwall.com/lists/oss-security/2010/09/21/9 openwall.com
http://openwall.com/lists/oss-security/2010/09/27/10 openwall.com
http://openwall.com/lists/oss-security/2010/09/27/4 Patch
http://openwall.com/lists/oss-security/2010/09/27/5 openwall.com
http://openwall.com/lists/oss-security/2010/09/27/7 openwall.com
http://openwall.com/lists/oss-security/2010/10/03/1 Patch
http://openwall.com/lists/oss-security/2010/10/25/2 Patch
http://secunia.com/advisories/49711 secunia.com
http://security.gentoo.org/glsa/glsa-201206-31.xml security.gentoo.org
http://www.openwall.com/lists/oss-security/2010/09/21/11 Patch
http://www.openwall.com/lists/oss-security/2010/09/24/2 www.openwall.com
https://bugzilla.redhat.com/show_bug.cgi?id=641361 Patch