Vulnetix
Try Vulnetix Request Demo
CVE-2010-4706 PUBLISHED CVSS 4.900000095367432 MEDIUM

The pam_sm_close_session function in pam_xauth.c in the pam_xauth module in Linux-PAM (aka pam) 1.1.2 and earlier does not properly handle a failure to determine a certain target uid, which might allow local users to delete unintended files by executing a program that relies on the pam_xauth PAM check.

EPSS 0.05% · 15.3th percentile

Risk Scores

CVSS v2.0
4.900000095367432
EPSS Score
0.05%
15.3th percentile

Affected Products

VendorProductVersions
n/an/an/a
linux-pamlinux-pam0, 0.99.1.0, 0.99.2.0

Timeline

References

Open in Interactive Console →