CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2010-3435

The (1) pam_env and (2) pam_mail modules in Linux-PAM (aka pam) before 1.1.2 use root privileges during read access to files and directories that belong to arbitrary user accounts, which might allow local users to obtain sensitive information by leveraging this filesystem activity, as demonstrated by a symlink attack on the .pam_environment file in a user's home directory.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 26.4%

CVSS Severity

CVSS v2 Score 4.7

References

Products affected by CVE-2010-3435

Linux-Pam » Linux-Pam » Version: 0.72

cpe:2.3:a:linux-pam:linux-pam:0.72
Linux-Pam » Linux-Pam » Version: 0.73

cpe:2.3:a:linux-pam:linux-pam:0.73
Linux-Pam » Linux-Pam » Version: 0.74

cpe:2.3:a:linux-pam:linux-pam:0.74
Linux-Pam » Linux-Pam » Version: 0.75

cpe:2.3:a:linux-pam:linux-pam:0.75
Linux-Pam » Linux-Pam » Version: 0.76

cpe:2.3:a:linux-pam:linux-pam:0.76
Linux-Pam » Linux-Pam » Version: 0.77

cpe:2.3:a:linux-pam:linux-pam:0.77
Linux-Pam » Linux-Pam » Version: 0.78

cpe:2.3:a:linux-pam:linux-pam:0.78
Linux-Pam » Linux-Pam » Version: 0.79

cpe:2.3:a:linux-pam:linux-pam:0.79
Linux-Pam » Linux-Pam » Version: 0.80

cpe:2.3:a:linux-pam:linux-pam:0.80
Linux-Pam » Linux-Pam » Version: 0.99.1.0

cpe:2.3:a:linux-pam:linux-pam:0.99.1.0
Linux-Pam » Linux-Pam » Version: 0.99.10.0

cpe:2.3:a:linux-pam:linux-pam:0.99.10.0
Linux-Pam » Linux-Pam » Version: 0.99.2.0

cpe:2.3:a:linux-pam:linux-pam:0.99.2.0
Linux-Pam » Linux-Pam » Version: 0.99.2.1

cpe:2.3:a:linux-pam:linux-pam:0.99.2.1
Linux-Pam » Linux-Pam » Version: 0.99.3.0

cpe:2.3:a:linux-pam:linux-pam:0.99.3.0
Linux-Pam » Linux-Pam » Version: 0.99.4.0

cpe:2.3:a:linux-pam:linux-pam:0.99.4.0
Linux-Pam » Linux-Pam » Version: 0.99.5.0

cpe:2.3:a:linux-pam:linux-pam:0.99.5.0
Linux-Pam » Linux-Pam » Version: 0.99.6.0

cpe:2.3:a:linux-pam:linux-pam:0.99.6.0
Linux-Pam » Linux-Pam » Version: 0.99.6.1

cpe:2.3:a:linux-pam:linux-pam:0.99.6.1
Linux-Pam » Linux-Pam » Version: 0.99.6.2

cpe:2.3:a:linux-pam:linux-pam:0.99.6.2
Linux-Pam » Linux-Pam » Version: 0.99.6.3

cpe:2.3:a:linux-pam:linux-pam:0.99.6.3
Linux-Pam » Linux-Pam » Version: 0.99.7.0

cpe:2.3:a:linux-pam:linux-pam:0.99.7.0
Linux-Pam » Linux-Pam » Version: 0.99.7.1

cpe:2.3:a:linux-pam:linux-pam:0.99.7.1
Linux-Pam » Linux-Pam » Version: 0.99.8.0

cpe:2.3:a:linux-pam:linux-pam:0.99.8.0
Linux-Pam » Linux-Pam » Version: 0.99.8.1

cpe:2.3:a:linux-pam:linux-pam:0.99.8.1
Linux-Pam » Linux-Pam » Version: 0.99.9.0

cpe:2.3:a:linux-pam:linux-pam:0.99.9.0
Linux-Pam » Linux-Pam » Version: 1.0.0

cpe:2.3:a:linux-pam:linux-pam:1.0.0
Linux-Pam » Linux-Pam » Version: 1.0.1

cpe:2.3:a:linux-pam:linux-pam:1.0.1
Linux-Pam » Linux-Pam » Version: 1.0.2

cpe:2.3:a:linux-pam:linux-pam:1.0.2
Linux-Pam » Linux-Pam » Version: 1.0.3

cpe:2.3:a:linux-pam:linux-pam:1.0.3
Linux-Pam » Linux-Pam » Version: 1.0.4

cpe:2.3:a:linux-pam:linux-pam:1.0.4
Linux-Pam » Linux-Pam » Version: 1.0.90

cpe:2.3:a:linux-pam:linux-pam:1.0.90
Linux-Pam » Linux-Pam » Version: 1.0.91

cpe:2.3:a:linux-pam:linux-pam:1.0.91
Linux-Pam » Linux-Pam » Version: 1.0.92

cpe:2.3:a:linux-pam:linux-pam:1.0.92
Linux-Pam » Linux-Pam » Version: 1.1.0

cpe:2.3:a:linux-pam:linux-pam:1.1.0
Linux-Pam » Linux-Pam » Version: 1.1.1

cpe:2.3:a:linux-pam:linux-pam:1.1.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2010-3435

Products

Pricing

Contact Us