https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 10:19:38 +0000 https://cve.radiocsirt.org/vuln/bdu:2015-06022 bdu:2015-06022 https://cve.radiocsirt.org/vuln/bdu:2015-06022 https://cve.radiocsirt.org/vuln/certa-2010-avi-530 certa-2010-avi-530 https://cve.radiocsirt.org/vuln/certa-2010-avi-530 https://cve.radiocsirt.org/vuln/euvd-2026-119933 EUVD-2026-119933 https://cve.radiocsirt.org/vuln/euvd-2026-119933 https://cve.radiocsirt.org/vuln/fkie_cve-2010-3435 <p>The (1) pam_env and (2) pam_mail modules in Linux-PAM (aka pam) before 1.1.2 use root privileges during read access to files and directories that belong to arbitrary user accounts, which might allow local users to obtain sensitive information by leveraging this filesystem activity, as demonstrated by a symlink attack on the .pam_environment file in a user&#39;s home directory.</p> <p>The (1) pam_env and (2) pam_mail modules in Linux-PAM (aka pam) before 1.1.2 use root privileges during read access to files and directories that belong to arbitrary user accounts, which might allow local users to obtain sensitive information by leveraging this filesystem activity, as demonstrated by a symlink attack on the .pam_environment file in a user&#39;s home directory.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2010-3435 https://cve.radiocsirt.org/vuln/ghsa-h8pg-g57w-hfr9 <p>The (1) pam_env and (2) pam_mail modules in Linux-PAM (aka pam) before 1.1.2 use root privileges during read access to files and directories that belong to arbitrary user accounts, which might allow local users to obtain sensitive information by leveraging this filesystem activity, as demonstrated by a symlink attack on the .pam_environment file in a user&#39;s home directory.</p> <p>The (1) pam_env and (2) pam_mail modules in Linux-PAM (aka pam) before 1.1.2 use root privileges during read access to files and directories that belong to arbitrary user accounts, which might allow local users to obtain sensitive information by leveraging this filesystem activity, as demonstrated by a symlink attack on the .pam_environment file in a user&#39;s home directory.</p> https://cve.radiocsirt.org/vuln/ghsa-h8pg-g57w-hfr9 https://cve.radiocsirt.org/vuln/gsd-2010-3435 gsd-2010-3435 https://cve.radiocsirt.org/vuln/gsd-2010-3435 https://cve.radiocsirt.org/vuln/rhsa-2010:0819 <p>pam: pam_xauth missing return value checks from setuid() and similar calls pam: pam_env and pam_mail accessing users&#39; file with root privileges pam: pam_namespace executes namespace.init with service&#39;s environment pam: pam_xauth: Does not check if certain ACL file is a regular file</p> <p>pam: pam_xauth missing return value checks from setuid() and similar calls pam: pam_env and pam_mail accessing users&#39; file with root privileges pam: pam_namespace executes namespace.init with service&#39;s environment pam: pam_xauth: Does not check if certain ACL file is a regular file</p> https://cve.radiocsirt.org/vuln/rhsa-2010:0819