CVE-2010-3853 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2010-3853 Interim 1 31 2025-11-05T05:54:42Z current 2021-05-30T12:54:17Z 2025-11-05T05:54:42Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2010-3853 pam_namespace.c in the pam_namespace module in Linux-PAM (aka pam) before 1.1.3 uses the environment of the invoking application or service during execution of the namespace.init script, which might allow local users to gain privileges by running a setuid program that relies on the pam_namespace PAM check, as demonstrated by the sudo program. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Micro 6.0 SUSE Linux Micro 6.1 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP1 openSUSE Leap 15.0 openSUSE Tumbleweed pam-1.1.8-11.57 pam-1.1.8-14.1 pam-1.1.8-23.1 pam-1.1.8-24.14.1 pam-1.1.8-24.27.1 pam-1.3.0-3.4 pam-1.3.0-4.10 pam-1.3.0-6.6.1 pam-1.3.0-lp150.4.6 pam-1.6.0-2.22 pam-1.6.1-slfo.1.1_1.3 pam-1.7.1-160000.2.2 pam-32bit-1.1.8-11.57 pam-32bit-1.1.8-14.1 pam-32bit-1.1.8-23.1 pam-32bit-1.1.8-24.14.1 pam-32bit-1.1.8-24.27.1 pam-32bit-1.3.0-3.4 pam-32bit-1.3.0-4.10 pam-32bit-1.3.0-6.6.1 pam-32bit-1.3.0-lp150.4.6 pam-devel-1.1.8-11.57 pam-devel-1.1.8-14.1 pam-devel-1.1.8-23.1 pam-devel-1.1.8-24.14.1 pam-devel-1.1.8-24.27.1 pam-devel-1.3.0-3.4 pam-devel-1.3.0-4.10 pam-devel-1.3.0-6.6.1 pam-devel-1.7.1-160000.2.2 pam-devel-32bit-1.3.0-3.4 pam-devel-32bit-1.3.0-4.10 pam-devel-32bit-1.3.0-6.6.1 pam-doc-1.1.8-11.57 pam-doc-1.1.8-14.1 pam-doc-1.1.8-23.1 pam-doc-1.1.8-24.14.1 pam-doc-1.1.8-24.27.1 pam-doc-1.3.0-3.4 pam-doc-1.3.0-4.10 pam-doc-1.3.0-6.6.1 pam-doc-1.7.1-160000.2.2 pam-extra-1.7.1-160000.2.2 pam-manpages-1.7.1-160000.2.2 pam-1.1.8-11.57 as a component of SUSE Linux Enterprise Desktop 12 pam-32bit-1.1.8-11.57 as a component of SUSE Linux Enterprise Desktop 12 pam-doc-1.1.8-11.57 as a component of SUSE Linux Enterprise Desktop 12 pam-1.1.8-14.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 pam-32bit-1.1.8-14.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 pam-doc-1.1.8-14.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 pam-1.1.8-14.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 pam-32bit-1.1.8-14.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 pam-doc-1.1.8-14.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 pam-1.1.8-23.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 pam-32bit-1.1.8-23.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 pam-doc-1.1.8-23.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 pam-1.1.8-24.14.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 pam-32bit-1.1.8-24.14.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 pam-doc-1.1.8-24.14.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 pam-1.1.8-24.27.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 pam-32bit-1.1.8-24.27.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 pam-doc-1.1.8-24.27.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 pam-1.3.0-4.10 as a component of SUSE Linux Enterprise Module for Basesystem 15 pam-32bit-1.3.0-4.10 as a component of SUSE Linux Enterprise Module for Basesystem 15 pam-devel-1.3.0-4.10 as a component of SUSE Linux Enterprise Module for Basesystem 15 pam-doc-1.3.0-4.10 as a component of SUSE Linux Enterprise Module for Basesystem 15 pam-1.3.0-6.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 pam-32bit-1.3.0-6.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 pam-devel-1.3.0-6.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 pam-doc-1.3.0-6.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 pam-devel-32bit-1.3.0-4.10 as a component of SUSE Linux Enterprise Module for Development Tools 15 pam-devel-32bit-1.3.0-6.6.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP1 pam-1.1.8-11.57 as a component of SUSE Linux Enterprise Server 12 pam-32bit-1.1.8-11.57 as a component of SUSE Linux Enterprise Server 12 pam-doc-1.1.8-11.57 as a component of SUSE Linux Enterprise Server 12 pam-1.1.8-14.1 as a component of SUSE Linux Enterprise Server 12 SP1 pam-32bit-1.1.8-14.1 as a component of SUSE Linux Enterprise Server 12 SP1 pam-doc-1.1.8-14.1 as a component of SUSE Linux Enterprise Server 12 SP1 pam-1.1.8-14.1 as a component of SUSE Linux Enterprise Server 12 SP2 pam-32bit-1.1.8-14.1 as a component of SUSE Linux Enterprise Server 12 SP2 pam-doc-1.1.8-14.1 as a component of SUSE Linux Enterprise Server 12 SP2 pam-1.1.8-23.1 as a component of SUSE Linux Enterprise Server 12 SP3 pam-32bit-1.1.8-23.1 as a component of SUSE Linux Enterprise Server 12 SP3 pam-doc-1.1.8-23.1 as a component of SUSE Linux Enterprise Server 12 SP3 pam-1.1.8-24.14.1 as a component of SUSE Linux Enterprise Server 12 SP4 pam-32bit-1.1.8-24.14.1 as a component of SUSE Linux Enterprise Server 12 SP4 pam-doc-1.1.8-24.14.1 as a component of SUSE Linux Enterprise Server 12 SP4 pam-1.1.8-24.27.1 as a component of SUSE Linux Enterprise Server 12 SP5 pam-32bit-1.1.8-24.27.1 as a component of SUSE Linux Enterprise Server 12 SP5 pam-doc-1.1.8-24.27.1 as a component of SUSE Linux Enterprise Server 12 SP5 pam-1.7.1-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 pam-devel-1.7.1-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 pam-doc-1.7.1-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 pam-extra-1.7.1-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 pam-manpages-1.7.1-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 pam-1.1.8-14.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 pam-doc-1.1.8-14.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 pam-1.1.8-24.27.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 pam-32bit-1.1.8-24.27.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 pam-doc-1.1.8-24.27.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 pam-devel-1.1.8-11.57 as a component of SUSE Linux Enterprise Software Development Kit 12 pam-devel-1.1.8-14.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 pam-devel-1.1.8-14.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 pam-devel-1.1.8-23.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 pam-devel-1.1.8-24.14.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 pam-devel-1.1.8-24.27.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 pam-1.6.0-2.22 as a component of SUSE Linux Micro 6.0 pam-1.6.1-slfo.1.1_1.3 as a component of SUSE Linux Micro 6.1 pam-1.3.0-lp150.4.6 as a component of openSUSE Leap 15.0 pam-32bit-1.3.0-lp150.4.6 as a component of openSUSE Leap 15.0 pam-1.3.0-3.4 as a component of openSUSE Tumbleweed pam-32bit-1.3.0-3.4 as a component of openSUSE Tumbleweed pam-devel-1.3.0-3.4 as a component of openSUSE Tumbleweed pam-devel-32bit-1.3.0-3.4 as a component of openSUSE Tumbleweed pam-doc-1.3.0-3.4 as a component of openSUSE Tumbleweed pam_namespace.c in the pam_namespace module in Linux-PAM (aka pam) before 1.1.3 uses the environment of the invoking application or service during execution of the namespace.init script, which might allow local users to gain privileges by running a setuid program that relies on the pam_namespace PAM check, as demonstrated by the sudo program. CVE-2010-3853 SUSE Linux Enterprise Desktop 12:pam-1.1.8-11.57 SUSE Linux Enterprise Desktop 12:pam-32bit-1.1.8-11.57 SUSE Linux Enterprise Desktop 12:pam-doc-1.1.8-11.57 SUSE Linux Enterprise Desktop 12 SP1:pam-1.1.8-14.1 SUSE Linux Enterprise Desktop 12 SP1:pam-32bit-1.1.8-14.1 SUSE Linux Enterprise Desktop 12 SP1:pam-doc-1.1.8-14.1 SUSE Linux Enterprise Desktop 12 SP2:pam-1.1.8-14.1 SUSE Linux Enterprise Desktop 12 SP2:pam-32bit-1.1.8-14.1 SUSE Linux Enterprise Desktop 12 SP2:pam-doc-1.1.8-14.1 SUSE Linux Enterprise Desktop 12 SP3:pam-1.1.8-23.1 SUSE Linux Enterprise Desktop 12 SP3:pam-32bit-1.1.8-23.1 SUSE Linux Enterprise Desktop 12 SP3:pam-doc-1.1.8-23.1 SUSE Linux Enterprise Desktop 12 SP4:pam-1.1.8-24.14.1 SUSE Linux Enterprise Desktop 12 SP4:pam-32bit-1.1.8-24.14.1 SUSE Linux Enterprise Desktop 12 SP4:pam-doc-1.1.8-24.14.1 SUSE Linux Enterprise High Performance Computing 12 SP5:pam-1.1.8-24.27.1 SUSE Linux Enterprise High Performance Computing 12 SP5:pam-32bit-1.1.8-24.27.1 SUSE Linux Enterprise High Performance Computing 12 SP5:pam-doc-1.1.8-24.27.1 SUSE Linux Enterprise Module for Basesystem 15:pam-1.3.0-4.10 SUSE Linux Enterprise Module for Basesystem 15:pam-32bit-1.3.0-4.10 SUSE Linux Enterprise Module for Basesystem 15:pam-devel-1.3.0-4.10 SUSE Linux Enterprise Module for Basesystem 15:pam-doc-1.3.0-4.10 SUSE Linux Enterprise Module for Basesystem 15 SP1:pam-1.3.0-6.6.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:pam-32bit-1.3.0-6.6.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:pam-devel-1.3.0-6.6.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:pam-doc-1.3.0-6.6.1 SUSE Linux Enterprise Module for Development Tools 15:pam-devel-32bit-1.3.0-4.10 SUSE Linux Enterprise Module for Development Tools 15 SP1:pam-devel-32bit-1.3.0-6.6.1 SUSE Linux Enterprise Server 12:pam-1.1.8-11.57 SUSE Linux Enterprise Server 12:pam-32bit-1.1.8-11.57 SUSE Linux Enterprise Server 12:pam-doc-1.1.8-11.57 SUSE Linux Enterprise Server 12 SP1:pam-1.1.8-14.1 SUSE Linux Enterprise Server 12 SP1:pam-32bit-1.1.8-14.1 SUSE Linux Enterprise Server 12 SP1:pam-doc-1.1.8-14.1 SUSE Linux Enterprise Server 12 SP2:pam-1.1.8-14.1 SUSE Linux Enterprise Server 12 SP2:pam-32bit-1.1.8-14.1 SUSE Linux Enterprise Server 12 SP2:pam-doc-1.1.8-14.1 SUSE Linux Enterprise Server 12 SP3:pam-1.1.8-23.1 SUSE Linux Enterprise Server 12 SP3:pam-32bit-1.1.8-23.1 SUSE Linux Enterprise Server 12 SP3:pam-doc-1.1.8-23.1 SUSE Linux Enterprise Server 12 SP4:pam-1.1.8-24.14.1 SUSE Linux Enterprise Server 12 SP4:pam-32bit-1.1.8-24.14.1 SUSE Linux Enterprise Server 12 SP4:pam-doc-1.1.8-24.14.1 SUSE Linux Enterprise Server 12 SP5:pam-1.1.8-24.27.1 SUSE Linux Enterprise Server 12 SP5:pam-32bit-1.1.8-24.27.1 SUSE Linux Enterprise Server 12 SP5:pam-doc-1.1.8-24.27.1 SUSE Linux Enterprise Server 16.0:pam-1.7.1-160000.2.2 SUSE Linux Enterprise Server 16.0:pam-devel-1.7.1-160000.2.2 SUSE Linux Enterprise Server 16.0:pam-doc-1.7.1-160000.2.2 SUSE Linux Enterprise Server 16.0:pam-extra-1.7.1-160000.2.2 SUSE Linux Enterprise Server 16.0:pam-manpages-1.7.1-160000.2.2 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:pam-1.1.8-14.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:pam-doc-1.1.8-14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:pam-1.1.8-24.27.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:pam-32bit-1.1.8-24.27.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:pam-doc-1.1.8-24.27.1 SUSE Linux Enterprise Software Development Kit 12:pam-devel-1.1.8-11.57 SUSE Linux Enterprise Software Development Kit 12 SP1:pam-devel-1.1.8-14.1 SUSE Linux Enterprise Software Development Kit 12 SP2:pam-devel-1.1.8-14.1 SUSE Linux Enterprise Software Development Kit 12 SP3:pam-devel-1.1.8-23.1 SUSE Linux Enterprise Software Development Kit 12 SP4:pam-devel-1.1.8-24.14.1 SUSE Linux Enterprise Software Development Kit 12 SP5:pam-devel-1.1.8-24.27.1 SUSE Linux Micro 6.0:pam-1.6.0-2.22 SUSE Linux Micro 6.1:pam-1.6.1-slfo.1.1_1.3 openSUSE Leap 15.0:pam-1.3.0-lp150.4.6 openSUSE Leap 15.0:pam-32bit-1.3.0-lp150.4.6 openSUSE Tumbleweed:pam-1.3.0-3.4 openSUSE Tumbleweed:pam-32bit-1.3.0-3.4 openSUSE Tumbleweed:pam-devel-1.3.0-3.4 openSUSE Tumbleweed:pam-devel-32bit-1.3.0-3.4 openSUSE Tumbleweed:pam-doc-1.3.0-3.4 moderate 6.9 AV:L/AC:M/Au:N/C:C/I:C/A:C