The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2010-484:02 advisory.

    PAM (Pluggable Authentication Modules) is a system security tool that allows system administrators to set     authentication policy without having to recompile programs that handle authentication.
    Security issues fixed with this release;
    CVE-2010-3316     CVE-2010-3435     CVE-2010-3853     No description available at the time of writing, see the CVE links below.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update fixes moderate vulnerabilities in pam_env, pam_namespace, pam_mail, and pam_xauth modules. Default configurations (or configurations generated by authconfig) are not affected by the pam_mail and pam_namespace vulnerabilities.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that the pam_namespace module executed the external script namespace.init with an unchanged environment inherited from an application calling PAM. In cases where such an environment was untrusted (for example, when pam_namespace was configured for setuid applications such as su or sudo), a local, unprivileged user could possibly use this flaw to escalate their privileges. (CVE-2010-3853)

It was discovered that the pam_env and pam_mail modules used root privileges while accessing user's files. A local, unprivileged user could use this flaw to obtain information, from the lines that have the KEY=VALUE format expected by pam_env, from an arbitrary file.
Also, in certain configurations, a local, unprivileged user using a service for which the pam_mail module was configured for, could use this flaw to obtain limited information about files or directories that they do not have access to. (CVE-2010-3435)

Note: As part of the fix for CVE-2010-3435, this update changes the default value of pam_env's configuration option user_readenv to 0, causing the module to not read user's ~/.pam_environment configuration file by default, as reading it may introduce unexpected changes to the environment of the service using PAM, or PAM modules consulted after pam_env.

It was discovered that the pam_xauth module did not verify the return values of the setuid() and setgid() system calls. A local, unprivileged user could use this flaw to execute the xauth command with root privileges and make it read an arbitrary input file.
(CVE-2010-3316)

USN-1140-1 fixed vulnerabilities in PAM. A regression was found that caused cron to stop working with a 'Module is unknown' error. As a result, systems configured with automatic updates will not receive updates until cron is restarted, these updates are installed or the system is rebooted. This update fixes the problem.

We apologize for the inconvenience.

Marcus Granado discovered that PAM incorrectly handled configuration files with non-ASCII usernames. A remote attacker could use this flaw to cause a denial of service, or possibly obtain login access with a different users username. This issue only affected Ubuntu 8.04 LTS.
(CVE-2009-0887)

It was discovered that the PAM pam_xauth, pam_env and pam_mail modules incorrectly handled dropping privileges when performing operations. A local attacker could use this flaw to read certain arbitrary files, and access other sensitive information. (CVE-2010-3316, CVE-2010-3430, CVE-2010-3431, CVE-2010-3435)

It was discovered that the PAM pam_namespace module incorrectly cleaned the environment during execution of the namespace.init script. A local attacker could use this flaw to possibly gain privileges. (CVE-2010-3853)

It was discovered that the PAM pam_xauth module incorrectly handled certain failures. A local attacker could use this flaw to delete certain unintended files. (CVE-2010-4706)

It was discovered that the PAM pam_xauth module incorrectly verified certain file properties. A local attacker could use this flaw to cause a denial of service. (CVE-2010-4707).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0819 advisory.

    - fix insecure dropping of priviledges in pam_xauth       and pam_mail - CVE-2010-3316 (#637898), CVE-2010-3435 (#641335)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote VMware ESX / ESXi host is missing a security-related patch.
It is, therefore, affected by multiple vulnerabilities, including arbitrary code execution vulnerabilities, in several third-party components and libraries :

  - bind
  - pam
  - popt
  - rpm
  - rpm-libs
  - rpm-python
  - Service Location Protocol daemon (SLPD)

The remote NewStart CGSL host, running version MAIN 6.06, has pam packages installed that are affected by multiple vulnerabilities:

  - pam_namespace.c in the pam_namespace module in Linux-PAM (aka pam) before 1.1.3 uses the environment of     the invoking application or service during execution of the namespace.init script, which might allow local     users to gain privileges by running a setuid program that relies on the pam_namespace PAM check, as     demonstrated by the sudo program. (CVE-2010-3853)

  - pam_unix.so in Linux-PAM 0.99.7.0 allows context-dependent attackers to log into accounts whose password     hash, as stored in /etc/passwd or /etc/shadow, has only two characters. (CVE-2007-0003)

  - Linux-PAM before 1.0.4 does not enforce the minimum password age (MINDAYS) as specified in /etc/shadow,     which allows local users to bypass intended security policy and change their passwords sooner than     specified. (CVE-2009-0579)

  - The run_coprocess function in pam_xauth.c in the pam_xauth module in Linux-PAM (aka pam) before 1.1.2 does     not check the return values of the setuid, setgid, and setgroups system calls, which might allow local     users to read arbitrary files by executing a program that relies on the pam_xauth PAM check.
    (CVE-2010-3316)

  - The (1) pam_env and (2) pam_mail modules in Linux-PAM (aka pam) before 1.1.2 use root privileges during     read access to files and directories that belong to arbitrary user accounts, which might allow local users     to obtain sensitive information by leveraging this filesystem activity, as demonstrated by a symlink     attack on the .pam_environment file in a user's home directory. (CVE-2010-3435)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 6.06 (SP), has pam packages installed that are affected by multiple vulnerabilities:

  - pam_namespace.c in the pam_namespace module in Linux-PAM (aka pam) before 1.1.3 uses the environment of     the invoking application or service during execution of the namespace.init script, which might allow local     users to gain privileges by running a setuid program that relies on the pam_namespace PAM check, as     demonstrated by the sudo program. (CVE-2010-3853)

  - pam_unix.so in Linux-PAM 0.99.7.0 allows context-dependent attackers to log into accounts whose password     hash, as stored in /etc/passwd or /etc/shadow, has only two characters. (CVE-2007-0003)

  - Linux-PAM before 1.0.4 does not enforce the minimum password age (MINDAYS) as specified in /etc/shadow,     which allows local users to bypass intended security policy and change their passwords sooner than     specified. (CVE-2009-0579)

  - The run_coprocess function in pam_xauth.c in the pam_xauth module in Linux-PAM (aka pam) before 1.1.2 does     not check the return values of the setuid, setgid, and setgroups system calls, which might allow local     users to read arbitrary files by executing a program that relies on the pam_xauth PAM check.
    (CVE-2010-3316)

  - The (1) pam_env and (2) pam_mail modules in Linux-PAM (aka pam) before 1.1.2 use root privileges during     read access to files and directories that belong to arbitrary user accounts, which might allow local users     to obtain sensitive information by leveraging this filesystem activity, as demonstrated by a symlink     attack on the .pam_environment file in a user's home directory. (CVE-2010-3435)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
283983	MiracleLinux 3 : pam-0.99.6.2-6.2.0.1.AXS3 (AXSA:2010-484:02)	Nessus	Miracle Linux Local Security Checks	2026/1/14	2026/1/14	high
50486	Fedora 13 : pam-1.1.1-6.fc13 (2010-17112)	Nessus	Fedora Local Security Checks	2010/11/5	2021/1/11	medium
50508	Fedora 14 : pam-1.1.1-6.fc14 (2010-17155)	Nessus	Fedora Local Security Checks	2010/11/8	2021/1/11	medium
60901	Scientific Linux Security Update : pam on SL6.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	medium
55103	Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 : pam regression (USN-1140-2)	Nessus	Ubuntu Local Security Checks	2011/6/13	2019/9/19	medium
68132	Oracle Linux 5 : pam (ELSA-2010-0819)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2024/10/22	high
89675	VMware ESX / ESXi Third-Party Libraries Multiple Vulnerabilities (VMSA-2011-0004) (remote check)	Nessus	Misc.	2016/3/4	2021/1/6	high
266242	NewStart CGSL MAIN 6.06 : pam Multiple Vulnerabilities (NS-SA-2025-0213)	Nessus	NewStart CGSL Local Security Checks	2025/9/30	2025/9/30	high
301209	NewStart CGSL MAIN 6.06 (SP) : pam Multiple Vulnerabilities (NS-SA-2026-0005)	Nessus	NewStart CGSL Local Security Checks	2026/3/6	2026/3/6	high

检测

插件搜索

high

medium

medium

medium

medium

high

high

high

high