NVD

Id
15944  
Name
CVE-2010-4706  
Description
The pam_sm_close_session function in pam_xauth.c in the pam_xauth module in Linux-PAM (aka pam) 1.1.2 and earlier does not properly handle a failure to determine a certain target uid, which might allow local users to delete unintended files by executing a program that relies on the pam_xauth PAM check.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-18  
Published
2011-01-24  
Modified Date
2012-07-23  
Seq
2010-4706  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
90357 15944 CVE-2010-4706 http://git.altlinux.org/people/ldv/packages/?p=pam.git;a=commit;h=Linux-PAM-1_1_2-3-g05dafc06cd3dfeb7c4b24942e4e1ae33ff75a123  View
90358 15944 CVE-2010-4706 [oss-security] 20101004 Re: Minor security flaw with pam_xauth  View
90359 15944 CVE-2010-4706 GLSA-201206-31  View
90360 15944 CVE-2010-4706 46045  View
90361 15944 CVE-2010-4706 linuxpam-pamsmclosesession-weak-security(65035)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
33698 JVNDB-2011-003940 Linux-PAM の pam_sm_close_session 関数における意図しないファイルを削除する脆弱性 Linux-PAM (pam) の pam_sm_close_session 関数は、適切に target uid を処理しないため、意図しないファイルを削除する脆弱性が存在します。 CVE-2010-4706 47286 CVE-2010-4706 15944 4.9 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003940.html 2011-01-24 2012-03-27 View