CVE-2013-1052

pam-xdg-support, as used in Ubuntu 12.10, does not properly handle the PATH environment variable, which allows local users to gain privileges via unspecified vectors related to sudo.

Score

CVSS 2.0 7.2 High

Status

Modified - security@ubuntu.com

Published

2013-03-21

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Ubuntu Linux (Canonical)

References

• http://www.securityfocus.com/bid/58550
• http://www.ubuntu.com/usn/USN-1766-1
• https://exchange.xforce.ibmcloud.com/vulnerabilities/82918