Skip to content
OpenAdvisories
Unscored RHSA-2010:0819 4 CVEs

Red Hat Security Advisory: pam security update

Published Sep 15, 2024 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 8

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client pam 0:0.99.6.2-6.el5_5.2
Red Hat · RHEL 5 enterprise_linux:5::client pam-debuginfo 0:0.99.6.2-6.el5_5.2
Red Hat · RHEL 5 enterprise_linux:5::client_workstation pam 0:0.99.6.2-6.el5_5.2
Red Hat · RHEL 5 enterprise_linux:5::client_workstation pam-debuginfo 0:0.99.6.2-6.el5_5.2
Red Hat · RHEL 5 enterprise_linux:5::client_workstation pam-devel 0:0.99.6.2-6.el5_5.2
Red Hat · RHEL 5 enterprise_linux:5::server pam 0:0.99.6.2-6.el5_5.2
Red Hat · RHEL 5 enterprise_linux:5::server pam-debuginfo 0:0.99.6.2-6.el5_5.2
Red Hat · RHEL 5 enterprise_linux:5::server pam-devel 0:0.99.6.2-6.el5_5.2

Vulnerabilities 4

  • Unscored —
    CVE-2010-3316

    The run_coprocess function in pam_xauth.c in the pam_xauth module in Linux-PAM (aka pam) before 1.1.2 does not check th…

    pam Debian
  • Unscored —
    CVE-2010-3435

    The (1) pam_env and (2) pam_mail modules in Linux-PAM (aka pam) before 1.1.2 use root privileges during read access to …

    pam Debian
  • Unscored —
    CVE-2010-3853

    pam_namespace.c in the pam_namespace module in Linux-PAM (aka pam) before 1.1.3 uses the environment of the invoking ap…

    pam Debian
  • Unscored —
    CVE-2010-4707

    The check_acl function in pam_xauth.c in the pam_xauth module in Linux-PAM (aka pam) 1.1.2 and earlier does not verify …

    pam Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=637898
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=641335
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=643043
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0819.json
  • report
    https://access.redhat.com/security/cve/CVE-2010-3316
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-3316
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-3316
  • report
    https://access.redhat.com/security/cve/CVE-2010-3435
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-3435
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-3435
  • report
    https://access.redhat.com/security/cve/CVE-2010-3853
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-3853
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-3853
  • report
    https://access.redhat.com/security/cve/CVE-2010-4707
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=672486
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-4707
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-4707