Skip to content
OpenAdvisories
Unscored RHSA-2010:0891 5 CVEs

Red Hat Security Advisory: pam security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 12

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::client pam 0:1.1.1-4.el6_0.1
Red Hat · RHEL 6 enterprise_linux:6::client pam-debuginfo 0:1.1.1-4.el6_0.1
Red Hat · RHEL 6 enterprise_linux:6::client pam-devel 0:1.1.1-4.el6_0.1
Red Hat · RHEL 6 enterprise_linux:6::computenode pam 0:1.1.1-4.el6_0.1
Red Hat · RHEL 6 enterprise_linux:6::computenode pam-debuginfo 0:1.1.1-4.el6_0.1
Red Hat · RHEL 6 enterprise_linux:6::computenode pam-devel 0:1.1.1-4.el6_0.1
Red Hat · RHEL 6 enterprise_linux:6::server pam 0:1.1.1-4.el6_0.1
Red Hat · RHEL 6 enterprise_linux:6::server pam-debuginfo 0:1.1.1-4.el6_0.1
Red Hat · RHEL 6 enterprise_linux:6::server pam-devel 0:1.1.1-4.el6_0.1
Red Hat · RHEL 6 enterprise_linux:6::workstation pam 0:1.1.1-4.el6_0.1
Red Hat · RHEL 6 enterprise_linux:6::workstation pam-debuginfo 0:1.1.1-4.el6_0.1
Red Hat · RHEL 6 enterprise_linux:6::workstation pam-devel 0:1.1.1-4.el6_0.1

Vulnerabilities 5

  • Unscored —
    CVE-2010-3316

    The run_coprocess function in pam_xauth.c in the pam_xauth module in Linux-PAM (aka pam) before 1.1.2 does not check th…

    pam Debian
  • Unscored —
    CVE-2010-3435

    The (1) pam_env and (2) pam_mail modules in Linux-PAM (aka pam) before 1.1.2 use root privileges during read access to …

    pam Debian
  • Unscored —
    CVE-2010-3853

    pam_namespace.c in the pam_namespace module in Linux-PAM (aka pam) before 1.1.3 uses the environment of the invoking ap…

    pam Debian
  • Unscored —
    CVE-2010-4707

    The check_acl function in pam_xauth.c in the pam_xauth module in Linux-PAM (aka pam) 1.1.2 and earlier does not verify …

    pam Debian
  • Unscored —
    CVE-2010-4708

    The pam_env module in Linux-PAM (aka pam) 1.1.2 and earlier reads the .pam_environment file in a user's home directory,…

    pam Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=637898
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=641335
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=643043
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0891.json
  • report
    https://access.redhat.com/security/cve/CVE-2010-3316
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-3316
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-3316
  • report
    https://access.redhat.com/security/cve/CVE-2010-3435
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-3435
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-3435
  • report
    https://access.redhat.com/security/cve/CVE-2010-3853
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-3853
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-3853
  • report
    https://access.redhat.com/security/cve/CVE-2010-4707
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=672486
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-4707
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-4707
  • report
    https://access.redhat.com/security/cve/CVE-2010-4708
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=672489
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-4708
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-4708