DEBIAN-CVE-2010-3435

🗓️ 24 Jan 2011 18:00:02Reported by GoogleType

osv🔗 osv.dev👁 1 Views

Debian: Linux-PAM pam_env and pam_mail before 1.1.2 read user files as root via symlink attack on the .pam_environment.

Reporter	Title	Published	Views	Family All 78
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
Tenable Nessus	CentOS 5 : pam (CESA-2010:0819)	24 Nov 201000:00	–	nessus
Tenable Nessus	Fedora 13 : pam-1.1.1-6.fc13 (2010-17112)	5 Nov 201000:00	–	nessus
Tenable Nessus	Fedora 12 : pam-1.1.1-6.fc12 (2010-17133)	18 Nov 201000:00	–	nessus
Tenable Nessus	Fedora 14 : pam-1.1.1-6.fc14 (2010-17155)	8 Nov 201000:00	–	nessus
Tenable Nessus	GLSA-201206-31 : Linux-PAM: Multiple vulnerabilities	26 Jun 201200:00	–	nessus
Tenable Nessus	Mandriva Linux Security Advisory : pam (MDVSA-2010:220)	4 Nov 201000:00	–	nessus
Tenable Nessus	MiracleLinux 3 : pam-0.99.6.2-6.2.0.1.AXS3 (AXSA:2010-484:02)	14 Jan 202600:00	–	nessus

Source	Link
security-tracker	www.security-tracker.debian.org/tracker/CVE-2010-3435

28 Apr 2026 20:11Current

6.3Medium risk

Vulners AI Score6.3

CVSS 24.7

EPSS0.00356