CVE-2010-3853
Description
pam_namespace.c in the pam_namespace module in Linux-PAM (aka pam) before 1.1.3 uses the environment of the invoking application or service during execution of the namespace.init script, which might allow local users to gain privileges by running a setuid program that relies on the pam_namespace PAM check, as demonstrated by the sudo program.
Risk Information
Base Score
7.8
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.053
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| (RHSA-2010:0819) Moderate: pam security update pam-0.99.6.2-6.el5_5.2.i386.rpm | Linux |
| (RHSA-2010:0819) Moderate: pam security update pam-0.99.6.2-6.el5_5.2.x86_64.rpm | Linux |
| (RHSA-2010:0819) Moderate: pam security update pam-devel-0.99.6.2-6.el5_5.2.i386.rpm | Linux |
| (RHSA-2010:0819) Moderate: pam security update pam-devel-0.99.6.2-6.el5_5.2.x86_64.rpm | Linux |
| CVE-2010-3853 | NCM |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234