PT-2011-1399 · Linux · Linux-Pam

Tomas Hoger · Published 2011-01-24 · Updated 2024-06-15 · CVE-2010-3430

Positive Technologies (AI Summary)

CVSS v2.0

4.7

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux-PAM version 1.1.2

Description The issue is related to the privilege-dropping implementation in the pam env and pam mail modules. It might allow local users to obtain sensitive information by leveraging unintended group permissions. This can be demonstrated by a symlink attack on the .pam environment file in a user's home directory.

Recommendations For Linux-PAM version 1.1.2, consider applying a patch that properly implements the setfsgid and setgroups system calls to fix the privilege-dropping issue in the pam env and pam mail modules. As a temporary workaround, restrict access to the .pam environment file to prevent symlink attacks.

Fix

Related Identifiers

CVE-2010-3430

OPENSUSE-SU-2024:10405-1

Affected Products

Linux-Pam

References · 28

• http://openwall.com/lists/oss-security/2010/09/21/8 · Patch
• http://openwall.com/lists/oss-security/2010/10/25/2 · Patch
• http://openwall.com/lists/oss-security/2010/10/03/1 · Patch
• https://security-tracker.debian.org/tracker/CVE-2010-3430 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-3430 · Security Note
• http://openwall.com/lists/oss-security/2010/09/21/3 · Patch
• https://osv.dev/vulnerability/CVE-2010-3430 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=641361 · Patch
• http://openwall.com/lists/oss-security/2010/09/27/4 · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2024:10405-1 · Vendor Advisory
• http://openwall.com/lists/oss-security/2010/09/27/5 · Patch
• http://security.gentoo.org/glsa/glsa-201206-31.xml · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2010-3430 · Vendor Advisory
• http://openwall.com/lists/oss-security/2010/09/27/7 · Patch
• http://git.altlinux.org/people/ldv/packages/?p=pam.git%3Ba=commit%3Bh=843807a3a90f52e7538be756616510730a24739a · Note