CVE-2010-3316

🗓️ 24 Jan 2011 17:00:00Reported by redhatType

cvelist

cvelist🔗 www.cve.org👁 23 Views

The run_coprocess function in pam_xauth.c does not check return values, potentially allowing local users to read arbitrary files

Reporter	Title	Published	Views	Family All 88
BDU FSTEC	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec

Source	Link
mandriva	www.mandriva.com/security/advisories
openwall	www.openwall.com/lists/oss-security/2010/10/25/2
openwall	www.openwall.com/lists/oss-security/2010/09/27/7
secunia	www.secunia.com/advisories/49711
openwall	www.openwall.com/lists/oss-security/2010/09/24/2
security	www.security.gentoo.org/glsa/glsa-201206-31.xml
lists	www.lists.vmware.com/pipermail/security-announce/2011/000126.html
openwall	www.openwall.com/lists/oss-security/2010/08/16/2
vmware	www.vmware.com/security/advisories/VMSA-2011-0004.html
git	www.git.altlinux.org/people/ldv/packages/

10 Oct 2018 18:57Current

5.8Medium risk

Vulners AI Score5.8

EPSS0.00072

linux-pam pam_xauth module setuid setgid setgroups system calls