CVE-2010-3435 Information disclosure in n/a

Medium 4.7 Published 24 Jan 2011 Updated 7 Aug 2024

Local attackers can exploit symlink attacks in PAM modules to read sensitive files from other user accounts due to improper privilege handling.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: Available

What is CVE-2010-3435?

CVE-2010-3435 is a medium-severity vulnerability in n/a, published on 24 Jan 2011. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

The (1) pam_env and (2) pam_mail modules in Linux-PAM (aka pam) before 1.1.2 use root privileges during read access to files and directories that belong to arbitrary user accounts, which might allow local users to obtain sensitive information by leveraging this filesystem activity, as demonstrated by a symlink attack on the .pam_environment file in a user's home directory.

Which versions are affected by CVE-2010-3435?

It affects 1 product.

Products include Linux-Pam Linux-Pam.

How do I fix CVE-2010-3435?

Upgrade to a fixed version.

Is CVE-2010-3435 being exploited?

There is no known exploitation of CVE-2010-3435 in the wild and no public exploit code.

Sources

Also known as DEBIAN-CVE-2010-3435, GHSA-h8pg-g57w-hfr9.