Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
pam_namespace.c in the pam_namespace module in Linux-PAM (aka pam) before 1.1.3 uses the environment of the invoking application or service during execution of the namespace.init script, which might allow local users to gain privileges by running a setuid program that relies on the pam_namespace PAM check, as demonstrated by the sudo program.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Kernel Linux-PAM pam_namespace模块特权提升漏洞
Vulnerability Description
Linux-PAM（又名PAM）是一种用于Linux平台中的认证机制，它通过提供一些动态链接库和一套统一的API，使系统管理员可以自由选择应用程序使用的验证机制。 Linux-PAM(又名pam)1.1.3之前版本中的pam_namespace模块中的pam_namespace.c文件在namespace.init脚本执行过程中使用了调用应用程序或者服务的环境。本地用户可以通过运行依赖pam_namespace PAM检查的setuid程序获取特权。
CVSS Information
N/A
Vulnerability Type
N/A