CVE-2010-3853: Medium severity suse pam vulnerability
pamnamespace.c in the pamnamespace module in Linux-PAM (aka pam) before 1.1.3 uses the environment of the invoking application or service during execution of the namespace.init script, which might allow local users to gain privileges by running a setuid program that relies on the pamnamespace PAM check, as demonstrated by the sudo program.
Other sources
Tomas Mraz pointed out that pamnamespace PAM module executes external namespace.init script with an environment settings inherited form the program or service that has pamnamespace configured. Such environment may be untrusted in some cases (when running setuid program that does not sanitize environment prior to calling PAM), and may allow local user to escalate privileges.
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3853?
The severity of CVE-2010-3853 is considered moderate due to the potential for local users to gain elevated privileges.
How do I fix CVE-2010-3853?
To fix CVE-2010-3853, update to Linux-PAM version 1.1.3 or later, which addresses this vulnerability.
Who is affected by CVE-2010-3853?
CVE-2010-3853 affects local users on systems using vulnerable versions of Linux-PAM prior to 1.1.3.
What does CVE-2010-3853 exploit?
CVE-2010-3853 exploits the improper handling of the environment by the pam_namespace module in Linux-PAM.
Can CVE-2010-3853 be exploited remotely?
CVE-2010-3853 cannot be exploited remotely as it requires local user access to initiate the attack.