VULNERABILITY INTELLIGENCE

CVE-2003-0388

CVSS score4.6 MEDIUM
EPSS probability0.90%
CISA KEVNot currently listed
Published2003-07-24
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:P/A:P

Description

pam_wheel in Linux-PAM 0.78, with the trust option enabled and the use_uid option disabled, allows local users to spoof log entries and gain privileges by causing getlogin() to return a spoofed user name.

Primary references