CVE-2010-3316

Published: Jan 24, 2011Modified: Apr 29, 2026

3.3

Vector

AV:L/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 3.4 / Impact: 4.9

Source: NVD

Description

The run_coprocess function in pam_xauth.c in the pam_xauth module in Linux-PAM (aka pam) before 1.1.2 does not check the return values of the setuid, setgid, and setgroups system calls, which might allow local users to read arbitrary files by executing a program that relies on the pam_xauth PAM check.

Affected (23)

Products: Linux Pam: Linux Pam

1 product

Configuration A

23 vulnerable

Vulnerable Software	Affected Versions
Linux Pam Linux Pam	Up to 1.1.1
Linux Pam Linux Pam	Version 0.99.1.0
Linux Pam Linux Pam	Version 0.99.10.0
Linux Pam Linux Pam	Version 0.99.2.0
Linux Pam Linux Pam	Version 0.99.2.1
Linux Pam Linux Pam	Version 0.99.3.0
Linux Pam Linux Pam	Version 0.99.4.0
Linux Pam Linux Pam	Version 0.99.5.0
Linux Pam Linux Pam	Version 0.99.6.0
Linux Pam Linux Pam	Version 0.99.6.1
Linux Pam Linux Pam	Version 0.99.6.2
Linux Pam Linux Pam	Version 0.99.6.3
Linux Pam Linux Pam	Version 0.99.7.0
Linux Pam Linux Pam	Version 0.99.7.1
Linux Pam Linux Pam	Version 0.99.8.0
Linux Pam Linux Pam	Version 0.99.8.1
Linux Pam Linux Pam	Version 0.99.9.0
Linux Pam Linux Pam	Version 1.0.0
Linux Pam Linux Pam	Version 1.0.1
Linux Pam Linux Pam	Version 1.0.2
Linux Pam Linux Pam	Version 1.0.3
Linux Pam Linux Pam	Version 1.0.4
Linux Pam Linux Pam	Version 1.1.0

References (42)

http://git.altlinux.org/people/ldv/packages/?p=pam.git%3Ba=commit%3Bh=06f882f30092a39a1db867c9744b2ca8d60e4ad6

Source: secalert@redhat.com

http://lists.vmware.com/pipermail/security-announce/2011/000126.html

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2010/08/16/2

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2010/09/21/3

Source: secalert@redhat.com

Patch

http://openwall.com/lists/oss-security/2010/09/21/8

Source: secalert@redhat.com

Patch

http://openwall.com/lists/oss-security/2010/09/27/10

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2010/09/27/4

Source: secalert@redhat.com

Patch

http://openwall.com/lists/oss-security/2010/09/27/5

Source: secalert@redhat.com

Patch

http://openwall.com/lists/oss-security/2010/09/27/7

Source: secalert@redhat.com

Patch

http://openwall.com/lists/oss-security/2010/10/25/2

Source: secalert@redhat.com

Patch

http://secunia.com/advisories/49711

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-201206-31.xml

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2010:220

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2010/09/24/2

Source: secalert@redhat.com

Patch

http://www.redhat.com/support/errata/RHSA-2010-0819.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2010-0891.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/516909/100/0/threaded

Source: secalert@redhat.com

http://www.vmware.com/security/advisories/VMSA-2011-0004.html

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2011/0606

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=637898

Source: secalert@redhat.com

Patch

https://sourceforge.net/tracker/?func=detail&aid=3028213&group_id=6663&atid=106663

Source: secalert@redhat.com

http://git.altlinux.org/people/ldv/packages/?p=pam.git%3Ba=commit%3Bh=06f882f30092a39a1db867c9744b2ca8d60e4ad6

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.vmware.com/pipermail/security-announce/2011/000126.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://openwall.com/lists/oss-security/2010/08/16/2

Source: af854a3a-2127-422b-91ae-364da2661108

http://openwall.com/lists/oss-security/2010/09/21/3

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://openwall.com/lists/oss-security/2010/09/21/8

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://openwall.com/lists/oss-security/2010/09/27/10

Source: af854a3a-2127-422b-91ae-364da2661108

http://openwall.com/lists/oss-security/2010/09/27/4

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://openwall.com/lists/oss-security/2010/09/27/5

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://openwall.com/lists/oss-security/2010/09/27/7

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://openwall.com/lists/oss-security/2010/10/25/2

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://secunia.com/advisories/49711

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-201206-31.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2010:220

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2010/09/24/2

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.redhat.com/support/errata/RHSA-2010-0819.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2010-0891.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/516909/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vmware.com/security/advisories/VMSA-2011-0004.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2011/0606

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=637898

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://sourceforge.net/tracker/?func=detail&aid=3028213&group_id=6663&atid=106663

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.