Description
pam-xdg-support, as used in Ubuntu 12.10, does not properly handle the PATH environment variable, which allows local users to gain privileges via unspecified vectors related to sudo.
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/58550
Vendor Advisory vendor-advisory
x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-1766-1
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/82918
Scores
EPSS
0.0045
EPSS Percentile
36.6%
Details
CWE
CWE-264
Status
published
Products (1)
canonical/ubuntu_linux
12.10
Published
Mar 21, 2013
Tracked Since
Feb 18, 2026