Oval Definition:oval:org.opensuse.security:def:20103316
Revision Date:2022-05-20Version:1
Title:CVE-2010-3316
Description:

The run_coprocess function in pam_xauth.c in the pam_xauth module in Linux-PAM (aka pam) before 1.1.2 does not check the return values of the setuid, setgid, and setgroups system calls, which might allow local users to read arbitrary files by executing a program that relies on the pam_xauth PAM check.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2010-3316
Mitre CVE-2010-3316
SUSE CVE-2010-3316
openSUSE-SU-2011:1208-1
openSUSE-SU-2011:1208-1
SUSE-SU-2011:1205-1
SUSE-SU-2011:1205-1
SUSE-SU-2011:1207-1
SUSE-SU-2011:1207-1
SUSE-SU-2011:1209-1
SUSE-SU-2011:1209-1
Platform(s):openSUSE 11.3
SUSE CORE 9 for AMD64 and Intel EM64T
SUSE Linux Enterprise Desktop 10 SP4 for AMD64 and Intel EM64T
SUSE Linux Enterprise Desktop 10 SP4 for x86
SUSE Linux Enterprise Desktop 11 SP1
SUSE Linux Enterprise SDK 10 SP3
SUSE Linux Enterprise Server 10 SP3
SUSE Linux Enterprise Server 10 SP4 for AMD64 and Intel EM64T
SUSE Linux Enterprise Server 10 SP4 for IBM POWER
SUSE Linux Enterprise Server 10 SP4 for IBM zSeries 64bit
SUSE Linux Enterprise Server 10 SP4 for IPF
SUSE Linux Enterprise Server 10 SP4 for x86
SUSE Linux Enterprise Server 11 SP1
SUSE Linux Enterprise Server 11 SP1 for Teradata
SUSE Linux Enterprise Server 11 SP1 for VMware
SUSE Linux Enterprise Server 11 SP1-TERADATA
SUSE Linux Enterprise Server for SAP 10 SP3
SUSE Linux Enterprise Server for SAP Applications 11 SP1-TERADATA
SUSE Linux Enterprise Software Development Kit 11 SP1
SUSE Linux Enterprise Teradata 10 SP3 for AMD64 and Intel EM64T
Product(s):
Definition Synopsis
  • Release Information
  • sles10-sp4 is installed
  • AND
  • pam-32bit less than 0.99.6.3-28.25.4
  • OR pam-64bit less than 0.99.6.3-28.25.4
  • OR pam-devel-32bit less than 0.99.6.3-28.25.4
  • OR pam-devel-64bit less than 0.99.6.3-28.25.4
  • OR pam-devel less than 0.99.6.3-28.25.4
  • OR pam-x86 less than 0.99.6.3-28.25.4
  • OR pam less than 0.99.6.3-28.25.4
  • OR Package Information
  • sles10-sp3 is installed
  • pam-32bit less than 0.99.6.3-28.20.3.4
  • OR pam-64bit less than 0.99.6.3-28.20.3.4
  • OR pam-devel-32bit less than 0.99.6.3-28.20.3.4
  • OR pam-devel-64bit less than 0.99.6.3-28.20.3.4
  • OR pam-devel less than 0.99.6.3-28.20.3.4
  • OR pam-x86 less than 0.99.6.3-28.20.3.4
  • OR pam less than 0.99.6.3-28.20.3.4
  • OR
  • sles10-sp3-sap is installed
  • pam-32bit less than 0.99.6.3-28.20.3.4
  • OR pam-devel-32bit less than 0.99.6.3-28.20.3.4
  • OR pam-devel less than 0.99.6.3-28.20.3.4
  • OR pam less than 0.99.6.3-28.20.3.4
    • Definition Synopsis
  • SUSE Linux Enterprise Server 11 SP1 is installed
  • AND Package Information
  • pam-1.0.4-0.7 is installed
  • OR pam-32bit-1.0.4-0.7 is installed
  • OR pam-doc-1.0.4-0.7 is installed
  • OR pam-x86-1.0.4-0.7 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Server 11 SP1-TERADATA is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 11 SP1-TERADATA is installed
  • AND
  • pam-1.0.4-0.7 is installed
  • OR pam-32bit-1.0.4-0.7 is installed
  • OR pam-doc-1.0.4-0.7 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 11 SP1 is installed
  • AND
  • pam-1.0.4-0.7 is installed
  • OR pam-32bit-1.0.4-0.9 is installed
  • OR pam-doc-1.0.4-0.7 is installed
  • OR pam-x86-1.0.4-0.9 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Server 11 SP1 is installed
  • AND
  • pam-1.0.4-0.7.1 is installed
  • OR pam-32bit-1.0.4-0.9.1 is installed
  • OR pam-doc-1.0.4-0.7.1 is installed
  • OR pam-x86-1.0.4-0.9.1 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 11 SP1-TERADATA is installed
  • AND
  • pam-1.0.4-0.7.1 is installed
  • OR pam-32bit-1.0.4-0.7.1 is installed
  • OR pam-doc-1.0.4-0.7.1 is installed
    • BACK