CVE-2010-4708

🗓️ 24 Jan 2011 18:00:00Reported by Debian Security Bug TrackerType

The pam_env module in Linux-PAM reads .pam_environment file allowing local users to run programs with unintended environmen

Reporter	Title	Published	Views	Family All 23
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
CVE	CVE-2010-4708	24 Jan 201118:00	–	cve
Cvelist	CVE-2010-4708	24 Jan 201118:00	–	cvelist
Oracle linux	pam security update	10 Feb 201100:00	–	oraclelinux
EUVD	EUVD-2010-4673	7 Oct 202500:30	–	euvd
Tenable Nessus	GLSA-201206-31 : Linux-PAM: Multiple vulnerabilities	26 Jun 201200:00	–	nessus
Tenable Nessus	Oracle Linux 6 : pam (ELSA-2010-0891)	12 Jul 201300:00	–	nessus
Tenable Nessus	RHEL 6 : pam (RHSA-2010:0891)	18 Nov 201000:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Debian	11	all	pam	1.1.3-7.1	pam_1.1.3-7.1_all.deb
Debian	12	all	pam	1.1.3-7.1	pam_1.1.3-7.1_all.deb
Debian	13	all	pam	1.1.3-7.1	pam_1.1.3-7.1_all.deb
Debian	14	all	pam	1.1.3-7.1	pam_1.1.3-7.1_all.deb
Debian	999	all	pam	1.1.3-7.1	pam_1.1.3-7.1_all.deb

24 Jan 2011 18:00Current

6Medium risk

Vulners AI Score6

CVSS 27.2

EPSS0.00369