CVE-2010-3430 — Linux-pam vulnerability

9 documents7 sources
Severity
4.7MEDIUMNVD
EPSS
0.1%
top 81.60%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
PAMDebian PAMLinux-pam
Timeline
PublishedJan 24
Latest updateMay 14

Description

The privilege-dropping implementation in the (1) pam_env and (2) pam_mail modules in Linux-PAM (aka pam) 1.1.2 does not perform the required setfsgid and setgroups system calls, which might allow local users to obtain sensitive information by leveraging unintended group permissions, as demonstrated by a symlink attack on the .pam_environment file in a user's home directory. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-3435.

CVSS vector

AV:L/AC:M/C:C/I:N/A:NExploitability: 3.4 | Impact: 6.9

Affected Packages3 packages

▶debiandebian/pam< pam 1.1.3-1 (bookworm)
▶Debianpam/pam< 1.1.3-1+3

Patches

Patch: openwall.com ↗Patch: openwall.com ↗Patch: openwall.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-fw5v-fh36-5x5q: The privilege-dropping implementation in the (1) pam_env and (2) pam_mail modules in Linux-PAM (aka pam) 1↗2022-05-14
▶
OSV
CVE-2010-3430: The privilege-dropping implementation in the (1) pam_env and (2) pam_mail modules in Linux-PAM (aka pam) 1↗2011-01-24
▶

📋Vendor Advisories

4
Ubuntu
PAM regression↗2011-05-31
▶
Ubuntu
PAM vulnerabilities↗2011-05-30
▶
Red Hat
pam: pam_mail and pam_env incorrect privilege dropping↗2010-09-21
▶
Debian
CVE-2010-3430: pam - The privilege-dropping implementation in the (1) pam_env and (2) pam_mail module...↗2010
▶

💬Community

2
Bugzilla
CVE-2010-3430 CVE-2010-3431 pam: pam_mail and pam_env incorrect privilege dropping↗2010-10-08
▶
Bugzilla
CVE-2010-3435 pam: pam_env and pam_mail accessing users' file with root privileges↗2010-10-08
▶
CVE-2010-3430 — Linux-pam vulnerability | cvebase