CVE-2010-4708 in Linux-PAM
Summary
The pam_env module in Linux-PAM (aka pam) 1.1.2 and earlier reads the .pam_environment file in a user s home directory, which might allow local users to run programs with an unintended environment by executing a program that relies on the pam_env PAM check.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
01/24/2011
Disclosure
01/24/2011
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 56223 | Linux-PAM information disclosure | 200 | Not defined | Not defined | CVE-2010-4708 |