CVE-2010-4708

Published: Jan 24, 2011Modified: Apr 29, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

The pam_env module in Linux-PAM (aka pam) 1.1.2 and earlier reads the .pam_environment file in a user's home directory, which might allow local users to run programs with an unintended environment by executing a program that relies on the pam_env PAM check.

Affected (24)

Products: Linux Pam: Linux Pam

Linux Pam

1 product

Linux Pam

Configuration A

24 vulnerable

Vulnerable Software	Affected Versions
Linux Pam Linux Pam	Up to 1.1.2
Linux Pam Linux Pam	Version 0.99.1.0
Linux Pam Linux Pam	Version 0.99.10.0
Linux Pam Linux Pam	Version 0.99.2.0
Linux Pam Linux Pam	Version 0.99.2.1
Linux Pam Linux Pam	Version 0.99.3.0
Linux Pam Linux Pam	Version 0.99.4.0
Linux Pam Linux Pam	Version 0.99.5.0
Linux Pam Linux Pam	Version 0.99.6.0
Linux Pam Linux Pam	Version 0.99.6.1
Linux Pam Linux Pam	Version 0.99.6.2
Linux Pam Linux Pam	Version 0.99.6.3
Linux Pam Linux Pam	Version 0.99.7.0
Linux Pam Linux Pam	Version 0.99.7.1
Linux Pam Linux Pam	Version 0.99.8.0
Linux Pam Linux Pam	Version 0.99.8.1
Linux Pam Linux Pam	Version 0.99.9.0
Linux Pam Linux Pam	Version 1.0.0
Linux Pam Linux Pam	Version 1.0.1
Linux Pam Linux Pam	Version 1.0.2
Linux Pam Linux Pam	Version 1.0.3
Linux Pam Linux Pam	Version 1.0.4
Linux Pam Linux Pam	Version 1.1.0
Linux Pam Linux Pam	Version 1.1.1