CVE-2010-3435
The (1) pam_env and (2) pam_mail modules in Linux-PAM (aka pam) before 1.1.2 use root privileges...
The (1) pam_env and (2) pam_mail modules in Linux-PAM (aka pam) before 1.1.2 use root privileges during read access to files and directories that belong to arbitrary user accounts, which might allow local users to obtain sensitive information by leveraging this filesystem activity, as demonstrated by a symlink attack on the .pam_environment file in a user's home directory.
Exploit likelihood
What each source reports
NVD Score used
The (1) pam_env and (2) pam_mail modules in Linux-PAM (aka pam) before 1.1.2 use root privileges during read access to files and directories that belong to arbitrary user accounts, which might allow local users to obtain sensitive information by leveraging this filesystem activity, as demonstrated by a symlink attack on the .pam_environment file in a user's home directory.
- Record
CVE-2010-3435- CVSS 2.0
- 4.7 Medium
AV:L/AC:M/Au:N/C:C/I:N/A:N - Updated
- 2026-11-02
CVE List No score
The (1) pam_env and (2) pam_mail modules in Linux-PAM (aka pam) before 1.1.2 use root privileges during read access to files and directories that belong to arbitrary user accounts, which might allow local users to obtain sensitive information by leveraging this filesystem activity, as demonstrated by a symlink attack on the .pam_environment file in a user's home directory.
- Record
CVE-2010-3435- Updated
- 2026-11-02
EUVDEUVD-2010-3433 No score
The (1) pam_env and (2) pam_mail modules in Linux-PAM (aka pam) before 1.1.2 use root privileges during read access to files and directories that belong to arbitrary user accounts, which might allow local users to obtain sensitive information by leveraging this filesystem activity, as demonstrated by a symlink attack on the .pam_environment file in a user's home directory.
- Record
EUVD-2010-3433- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h8pg-g57w-hfr9 No score
The (1) pam_env and (2) pam_mail modules in Linux-PAM (aka pam) before 1.1.2 use root privileges...
The (1) pam_env and (2) pam_mail modules in Linux-PAM (aka pam) before 1.1.2 use root privileges during read access to files and directories that belong to arbitrary user accounts, which might allow local users to obtain sensitive information by leveraging this filesystem activity, as demonstrated by a symlink attack on the .pam_environment file in a user's home directory.
- Record
GHSA-h8pg-g57w-hfr9- Updated
- 2026-11-02
OSV No score
The (1) pam_env and (2) pam_mail modules in Linux-PAM (aka pam) before 1.1.2 use root privileges during read access to files and directories that belong to arbitrary user accounts, which might allow local users to obtain sensitive information by leveraging this filesystem activity, as demonstrated by a symlink attack on the .pam_environment file in a user's home directory.
- Record
CVE-2010-3435- Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-3435 No score
The (1) pam_env and (2) pam_mail modules in Linux-PAM (aka pam) before 1.1.2 use root privileges during read access to files and directories that belong to arbitrary user accounts, which might allow local users to obtain sensitive information by leveraging this filesystem activity, as demonstrated by a symlink attack on the .pam_environment file in a user's home directory.
- Record
DEBIAN-CVE-2010-3435- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
pamDebian:12 |
before 1.1.3-1 | 1.1.3-1 |
pamDebian:13 |
before 1.1.3-1 | 1.1.3-1 |
pamDebian:14 |
before 1.1.3-1 | 1.1.3-1 |
pamRed Hat:enterprise_linux:5::client_workstation |
before 0:0.99.6.2-6.el5_5.2 | 0:0.99.6.2-6.el5_5.2 |
pam-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:0.99.6.2-6.el5_5.2 | 0:0.99.6.2-6.el5_5.2 |
pam-develRed Hat:enterprise_linux:5::client_workstation |
before 0:0.99.6.2-6.el5_5.2 | 0:0.99.6.2-6.el5_5.2 |
pamRed Hat:enterprise_linux:5::client |
before 0:0.99.6.2-6.el5_5.2 | 0:0.99.6.2-6.el5_5.2 |
pam-debuginfoRed Hat:enterprise_linux:5::client |
before 0:0.99.6.2-6.el5_5.2 | 0:0.99.6.2-6.el5_5.2 |
pamRed Hat:enterprise_linux:5::server |
before 0:0.99.6.2-6.el5_5.2 | 0:0.99.6.2-6.el5_5.2 |
pam-debuginfoRed Hat:enterprise_linux:5::server |
before 0:0.99.6.2-6.el5_5.2 | 0:0.99.6.2-6.el5_5.2 |
Show 13 moreShow less
| Package | Affected | Fixed |
|---|---|---|
pam-develRed Hat:enterprise_linux:5::server |
before 0:0.99.6.2-6.el5_5.2 | 0:0.99.6.2-6.el5_5.2 |
pamRed Hat:enterprise_linux:6::client |
before 0:1.1.1-4.el6_0.1 | 0:1.1.1-4.el6_0.1 |
pam-debuginfoRed Hat:enterprise_linux:6::client |
before 0:1.1.1-4.el6_0.1 | 0:1.1.1-4.el6_0.1 |
pam-develRed Hat:enterprise_linux:6::client |
before 0:1.1.1-4.el6_0.1 | 0:1.1.1-4.el6_0.1 |
pamRed Hat:enterprise_linux:6::computenode |
before 0:1.1.1-4.el6_0.1 | 0:1.1.1-4.el6_0.1 |
pam-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:1.1.1-4.el6_0.1 | 0:1.1.1-4.el6_0.1 |
pam-develRed Hat:enterprise_linux:6::computenode |
before 0:1.1.1-4.el6_0.1 | 0:1.1.1-4.el6_0.1 |
pamRed Hat:enterprise_linux:6::server |
before 0:1.1.1-4.el6_0.1 | 0:1.1.1-4.el6_0.1 |
pam-debuginfoRed Hat:enterprise_linux:6::server |
before 0:1.1.1-4.el6_0.1 | 0:1.1.1-4.el6_0.1 |
pam-develRed Hat:enterprise_linux:6::server |
before 0:1.1.1-4.el6_0.1 | 0:1.1.1-4.el6_0.1 |
pamRed Hat:enterprise_linux:6::workstation |
before 0:1.1.1-4.el6_0.1 | 0:1.1.1-4.el6_0.1 |
pam-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:1.1.1-4.el6_0.1 | 0:1.1.1-4.el6_0.1 |
pam-develRed Hat:enterprise_linux:6::workstation |
before 0:1.1.1-4.el6_0.1 | 0:1.1.1-4.el6_0.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-3435 is a medium vulnerability (CVSS 4.7) in Linux-pam, published January 24, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.35%, the 29th percentile. Fixed in pam 1.1.3-1.
References
openwall.com/lists/oss-security/2010/09/27/5
security.gentoo.org/glsa/glsa-201206-31.xml
lists.vmware.com/pipermail/security-announce/2011/000126.html
vupen.com/english/advisories/2011/0606
securityfocus.com/archive/1/516909/100/0/threaded
Show 40 moreShow less
openwall.com/lists/oss-security/2010/09/24/2
mandriva.com/security/advisories?name=MDVSA-2010:220
secunia.com/advisories/49711
git.altlinux.org/people/ldv/packages?p=pam.git%3Ba=commit%3Bh=06f882f30092a39a1db867c9744b2ca8d60e4ad6
redhat.com/support/errata/RHSA-2010-0891.html
bugzilla.redhat.com/show_bug.cgi?id=641335
vmware.com/security/advisories/VMSA-2011-0004.html
nvd.nist.gov/vuln/detail/CVE-2010-3435
github.com/advisories/GHSA-h8pg-g57w-hfr9
security-tracker.debian.org/tracker/CVE-2010-3435
access.redhat.com/errata/RHSA-2010:0819
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0819.json
cve.org/CVERecord?id=CVE-2010-3316