VULNERABILITY INTELLIGENCE
CVE-2010-3853
CVSS score6.9 MEDIUM
EPSS probability0.41%
CISA KEVNot currently listed
Published2011-01-24
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:C/I:C/A:C
Description
pam_namespace.c in the pam_namespace module in Linux-PAM (aka pam) before 1.1.3 uses the environment of the invoking application or service during execution of the namespace.init script, which might allow local users to gain privileges by running a setuid program that relies on the pam_namespace PAM check, as demonstrated by the sudo program.