CVE-2010-4706

The pam_sm_close_session function in pam_xauth.c in the pam_xauth module in Linux-PAM (aka pam) 1.1.2 and earlier does not properly handle a failure to…

published January 24, 2011

CVSS
—
EPSS
0%
Percentile
29.5
In the wild
Unconfirmed
What it is

The pam_sm_close_session function in pam_xauth.c in the pam_xauth module in Linux-PAM (aka pam) 1.1.2 and earlier does not properly handle a failure to determine a certain target uid, which might allow local users to delete unintended files by executing a program that relies on the pam_xauth PAM check.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00368 · 29.5th percentile
Published
2011-01-24T18:00Z
EPSS history
Timeline
  • 24 JAN 18:00Z
    The pam_sm_close_session function in pam_xauth.c in the pam_xauth module in Linux-PAM (aka pam) 1.1.2 and earlier does not properly handle a failure to…
    cvelistv5