Lucene search

K
cvelistRedhatCVELIST:CVE-2010-3316
HistoryJan 24, 2011 - 5:00 p.m.

CVE-2010-3316

2011-01-2417:00:00
redhat
raw.githubusercontent.com
2

5.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.6%

The run_coprocess function in pam_xauth.c in the pam_xauth module in Linux-PAM (aka pam) before 1.1.2 does not check the return values of the setuid, setgid, and setgroups system calls, which might allow local users to read arbitrary files by executing a program that relies on the pam_xauth PAM check.

5.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.6%