Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2010-4706
HistoryJan 24, 2011 - 7:00 p.m.

CVE-2010-4706

2011-01-2419:00:01
[email protected]
web.nvd.nist.gov
8

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.1

Confidence

Low

EPSS

0

Percentile

5.1%

JSON

The pam_sm_close_session function in pam_xauth.c in the pam_xauth module in Linux-PAM (aka pam) 1.1.2 and earlier does not properly handle a failure to determine a certain target uid, which might allow local users to delete unintended files by executing a program that relies on the pam_xauth PAM check.

Affected configurations

Nvd
Node
linux-pamlinux-pamRange≤1.1.2
OR
linux-pamlinux-pamMatch0.99.1.0
OR
linux-pamlinux-pamMatch0.99.2.0
OR
linux-pamlinux-pamMatch0.99.2.1
OR
linux-pamlinux-pamMatch0.99.3.0
OR
linux-pamlinux-pamMatch0.99.4.0
OR
linux-pamlinux-pamMatch0.99.5.0
OR
linux-pamlinux-pamMatch0.99.6.0
OR
linux-pamlinux-pamMatch0.99.6.1
OR
linux-pamlinux-pamMatch0.99.6.2
OR
linux-pamlinux-pamMatch0.99.6.3
OR
linux-pamlinux-pamMatch0.99.7.0
OR
linux-pamlinux-pamMatch0.99.7.1
OR
linux-pamlinux-pamMatch0.99.8.0
OR
linux-pamlinux-pamMatch0.99.8.1
OR
linux-pamlinux-pamMatch0.99.9.0
OR
linux-pamlinux-pamMatch0.99.10.0
OR
linux-pamlinux-pamMatch1.0.0
OR
linux-pamlinux-pamMatch1.0.1
OR
linux-pamlinux-pamMatch1.0.2
OR
linux-pamlinux-pamMatch1.0.3
OR
linux-pamlinux-pamMatch1.0.4
OR
linux-pamlinux-pamMatch1.1.0
OR
linux-pamlinux-pamMatch1.1.1
VendorProductVersionCPE
linux-pamlinux-pam*cpe:2.3:a:linux-pam:linux-pam:*:*:*:*:*:*:*:*
linux-pamlinux-pam0.99.1.0cpe:2.3:a:linux-pam:linux-pam:0.99.1.0:*:*:*:*:*:*:*
linux-pamlinux-pam0.99.2.0cpe:2.3:a:linux-pam:linux-pam:0.99.2.0:*:*:*:*:*:*:*
linux-pamlinux-pam0.99.2.1cpe:2.3:a:linux-pam:linux-pam:0.99.2.1:*:*:*:*:*:*:*
linux-pamlinux-pam0.99.3.0cpe:2.3:a:linux-pam:linux-pam:0.99.3.0:*:*:*:*:*:*:*
linux-pamlinux-pam0.99.4.0cpe:2.3:a:linux-pam:linux-pam:0.99.4.0:*:*:*:*:*:*:*
linux-pamlinux-pam0.99.5.0cpe:2.3:a:linux-pam:linux-pam:0.99.5.0:*:*:*:*:*:*:*
linux-pamlinux-pam0.99.6.0cpe:2.3:a:linux-pam:linux-pam:0.99.6.0:*:*:*:*:*:*:*
linux-pamlinux-pam0.99.6.1cpe:2.3:a:linux-pam:linux-pam:0.99.6.1:*:*:*:*:*:*:*
linux-pamlinux-pam0.99.6.2cpe:2.3:a:linux-pam:linux-pam:0.99.6.2:*:*:*:*:*:*:*
Rows per page:
1-10 of 241

Related

prion 1
cve 1
debiancve 1
cvelist 1
ubuntucve 1
openvas 6
nessus 3
ubuntu 2
gentoo 1
prion
prion
Authentication flaw
2011-01-24 19:00:00
cve
cve
CVE-2010-4706
2011-01-24 19:00:01
debiancve
debiancve
CVE-2010-4706
2011-01-24 19:00:01
cvelist
cvelist
CVE-2010-4706
2011-01-24 18:00:00
ubuntucve
ubuntucve
CVE-2010-4706
2011-01-24 00:00:00
openvas
openvas
Ubuntu Update for pam USN-1140-1
2011-06-06 00:00:00
Ubuntu: Security Advisory (USN-1140-2)
2011-06-06 00:00:00
Ubuntu: Security Advisory (USN-1140-1)
2011-06-06 00:00:00
nessus
nessus
Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 : pam vulnerabilities (USN-1140-1)
2011-06-13 00:00:00
Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 : pam regression (USN-1140-2)
2011-06-13 00:00:00
GLSA-201206-31 : Linux-PAM: Multiple vulnerabilities
2012-06-26 00:00:00
ubuntu
ubuntu
PAM regression
2011-05-31 00:00:00
PAM vulnerabilities
2011-05-30 00:00:00
gentoo
gentoo
Linux-PAM: Multiple vulnerabilities
2012-06-25 00:00:00

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.1

Confidence

Low

EPSS

0

Percentile

5.1%

JSON
Related for NVD:CVE-2010-4706
prion1cve1debiancve1cvelist1ubuntucve1openvas6nessus3ubuntu2gentoo1