CVE-2010-4708
EPSS 0.37%
描述
The pam_env module in Linux-PAM (aka pam) 1.1.2 and earlier reads the .pam_environment file in a user's home directory, which might allow local users to run programs with an unintended environment by executing a program that relies on the pam_env PAM check.
如何修補 CVE-2010-4708
要修補 CVE-2010-4708,請將受影響套件升級到下列已修補版本。
- Debian/pam—升級至 1.1.3-7.1 或更新版本
CVE-2010-4708 正在被利用嗎?
低 — EPSS 為 0.4%,目前沒有觀察到大規模利用活動。
受影響套件(1)
- from 0, < 1.1.3-7.1