| ID | CVE-2010-3853 | ||||||
| Sažetak | pam_namespace.c in the pam_namespace module in Linux-PAM (aka pam) before 1.1.3 uses the environment of the invoking application or service during execution of the namespace.init script, which might allow local users to gain privileges by running a setuid program that relies on the pam_namespace PAM check, as demonstrated by the sudo program. | ||||||
| Reference |
|
||||||
| CVSS |
|
||||||
| Pristup |
|
||||||
| Impact |
|
||||||
| CVSS vektor | AV:L/AC:M/Au:N/C:C/I:C/A:C | ||||||
| Zadnje važnije ažuriranje | 03-01-2019 - 15:01 | ||||||
| Objavljeno | 24-01-2011 - 18:00 |
