Local Privilege Escalation in Linux-PAM pam_env Module

CVE-2010-4708

What is CVE-2010-4708?

The pam_env module in versions of Linux-PAM up to 1.1.2 is susceptible to a local privilege escalation vulnerability. It improperly processes the .pam_environment file located in a user's home directory. As a result, local users can potentially execute programs in an unintended environment by leveraging the pam_env PAM check. This flaw may lead to unauthorized actions during program execution and can be exploited by malicious actors to escalate their privileges on the system.

References