CVE-2010-3316

The run_coprocess function in pam_xauth.c in the pam_xauth module in Linux-PAM (aka pam) before 1.1.2 does not check the return values of the setuid, setgid…

published January 24, 2011

CVSS
—
EPSS
0%
Percentile
28.7
In the wild
Unconfirmed
What it is

The run_coprocess function in pam_xauth.c in the pam_xauth module in Linux-PAM (aka pam) before 1.1.2 does not check the return values of the setuid, setgid, and setgroups system calls, which might allow local users to read arbitrary files by executing a program that relies on the pam_xauth PAM check.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00363 · 28.7th percentile
Published
2011-01-24T17:00Z
EPSS history
Timeline
  • 24 JAN 17:00Z
    The run_coprocess function in pam_xauth.c in the pam_xauth module in Linux-PAM (aka pam) before 1.1.2 does not check the return values of the setuid, setgid…
    cvelistv5