CVE-2010-0832: Medium severity ubuntu vulnerability

Published Jul 12, 2010

Updated

pammotd (aka the MOTD module) in libpam-modules before 1.1.0-2ubuntu1.1 in PAM on Ubuntu 9.10 and libpam-modules before 1.1.1-2ubuntu5 in PAM on Ubuntu 10.04 LTS allows local users to change the ownership of arbitrary files via a symlink attack on .cache in a user's home directory, related to "user file stamps" and the motd.legal-notice file.

Affected Software

2 affected components

Ubuntu=10.04

Ubuntu=9.10

Remediation

Patch Available

http://www.securityfocus.com/bid/41465

Event History

Jul 12, 2010

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-0832?

CVE-2010-0832 is considered a medium severity vulnerability due to its ability to allow local users to change file ownership.

How do I fix CVE-2010-0832?

To fix CVE-2010-0832, upgrade to the patched versions of libpam-modules, specifically 1.1.0-2ubuntu1.1 for Ubuntu 9.10 and 1.1.1-2ubuntu5 for Ubuntu 10.04 LTS.

Who is affected by CVE-2010-0832?

CVE-2010-0832 affects users on Ubuntu 9.10 and Ubuntu 10.04 LTS who are using libpam-modules versions prior to the specified fixes.

What kind of attack does CVE-2010-0832 expose systems to?

CVE-2010-0832 exposes systems to a symlink attack that allows local users to manipulate file ownership in their home directories.

Is CVE-2010-0832 exploitable remotely?

CVE-2010-0832 is not remotely exploitable as it requires local access to the affected systems.