Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

pam-xdg-support: privilege escalation

Package(s):

pam-xdg-support

CVE #(s):

CVE-2013-1052

Created:

March 18, 2013

Updated:

March 20, 2013

Description:

From the Ubuntu advisory:

Zbigniew Tenerowicz and Sebastian Krzyszkowiak discovered that pam-xdg-support incorrectly handled the PATH environment variable. A local attacker could use this issue in combination with sudo to possibly escalate privileges.

Alerts:

Ubuntu

USN-1766-1

2013-03-18

(Log in to post comments)