Vulnerability in Canonical Ubuntu Linux
CVE-2013-1052
pam-xdg-support, as used in Ubuntu 12.10, does not properly handle the PATH environment variable, which allows local users to gain privileges via unspecified vectors related to sudo.
EPSS: 0.005 (37.0th percentile) — read the EPSS interpretation.
Affected products
- Canonical Ubuntu_linux — versions 12.10
- N/a — versions n/a
Weakness classification (CWE)
References
- security@ubuntu.com (vdb-entry, x_refsource_BID)
- security@ubuntu.com (x_refsource_UBUNTU, vendor-advisory, Vendor Advisory)
- security@ubuntu.com (vdb-entry, x_refsource_XF)