NVD

Id
14721  
Name
CVE-2010-3316  
Description
The run_coprocess function in pam_xauth.c in the pam_xauth module in Linux-PAM (aka pam) before 1.1.2 does not check the return values of the setuid, setgid, and setgroups system calls, which might allow local users to read arbitrary files by executing a program that relies on the pam_xauth PAM check.  
Reject
 
CVSS Version
2  
CVSS Score
3.3  
Severity
Low  
CVSS Base Score
3.3  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-18  
Published
2011-01-24  
Modified Date
2012-07-23  
Seq
2010-3316  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
81580 14721 CVE-2010-3316 http://git.altlinux.org/people/ldv/packages/?p=pam.git;a=commit;h=06f882f30092a39a1db867c9744b2ca8d60e4ad6  View
81581 14721 CVE-2010-3316 [security-announce] 20110307 VMSA-2011-0004 VMware ESX/ESXi SLPD denial of service vulnerability and ESX third party updates for Service Console packages bind, pam, and rpm  View
81582 14721 CVE-2010-3316 [oss-security] 20100816 Minor security flaw with pam_xauth  View
81583 14721 CVE-2010-3316 [oss-security] 20100921 Re: Minor security flaw with pam_xauth  View
81584 14721 CVE-2010-3316 [oss-security] 20100921 Re: Minor security flaw with pam_xauth  View
81585 14721 CVE-2010-3316 [oss-security] 20100928 Re: Minor security flaw with pam_xauth  View
81586 14721 CVE-2010-3316 [oss-security] 20100927 Re: Minor security flaw with pam_xauth  View
81587 14721 CVE-2010-3316 [oss-security] 20100927 Re: Minor security flaw with pam_xauth  View
81588 14721 CVE-2010-3316 [oss-security] 20100928 Re: Minor security flaw with pam_xauth  View
81589 14721 CVE-2010-3316 [oss-security] 20101025 Re: Minor security flaw with pam_xauth  View
81590 14721 CVE-2010-3316 GLSA-201206-31  View
81591 14721 CVE-2010-3316 MDVSA-2010:220  View
81592 14721 CVE-2010-3316 [oss-security] 20100924 Re: Minor security flaw with pam_xauth  View
81593 14721 CVE-2010-3316 RHSA-2010:0819  View
81594 14721 CVE-2010-3316 RHSA-2010:0891  View
81595 14721 CVE-2010-3316 20110308 VMSA-2011-0004 VMware ESX/ESXi SLPD denial of service vulnerability and ESX third party updates for Service Console packages bind, pam, and rpm.  View
81596 14721 CVE-2010-3316 http://www.vmware.com/security/advisories/VMSA-2011-0004.html  View
81597 14721 CVE-2010-3316 ADV-2011-0606  View
81598 14721 CVE-2010-3316 https://bugzilla.redhat.com/show_bug.cgi?id=637898  View
81599 14721 CVE-2010-3316 https://sourceforge.net/tracker/?func=detail&aid=3028213&group_id=6663&atid=106663  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36966 JVNDB-2010-002746 Linux-PAM の run_coprocess 関数における任意のファイルを読まれる脆弱性 Linux-PAM の pam_xauth モジュール内にある pam_xauth.c の run_coprocess 関数は、 setuid、setgid および setgroups のシステムコールの戻り値をチェックしないため、任意のファイルを読まれる脆弱性が存在します。 CVE-2010-3316 45896 CVE-2010-3316 14721 3.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002746.html 2010-11-01 2011-03-28 View