# CVEs published 2011-01-24

13 CVEs were published on January 24, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2010-4706](https://cve.now/CVE-2010-4706.md): The pam\_sm\_close\_session function in pam\_xauth.c in the pam\_xauth module in Linux-PAM (aka pam) 1.1.2 and earlier does not properly handle… (no CVSS)
- [CVE-2010-4707](https://cve.now/CVE-2010-4707.md): The check\_acl function in pam\_xauth.c in the pam\_xauth module in Linux-PAM (aka pam) 1.1.2 and earlier does not verify that a certain ACL… (no CVSS)
- [CVE-2010-4708](https://cve.now/CVE-2010-4708.md): The pam\_env module in Linux-PAM (aka pam) 1.1.2 and earlier reads the .pam\_environment file in a user's home directory, which might allow… (no CVSS)
- [CVE-2010-3316](https://cve.now/CVE-2010-3316.md): The run\_coprocess function in pam\_xauth.c in the pam\_xauth module in Linux-PAM (aka pam) before 1.1.2 does not check the return values of… (no CVSS)
- [CVE-2010-3430](https://cve.now/CVE-2010-3430.md): The privilege-dropping implementation in the (1) pam\_env and (2) pam\_mail modules in Linux-PAM (aka pam) 1.1.2 does not perform the… (no CVSS)
- [CVE-2010-3431](https://cve.now/CVE-2010-3431.md): The privilege-dropping implementation in the (1) pam\_env and (2) pam\_mail modules in Linux-PAM (aka pam) 1.1.2 does not check the return… (no CVSS)
- [CVE-2010-3435](https://cve.now/CVE-2010-3435.md): The (1) pam\_env and (2) pam\_mail modules in Linux-PAM (aka pam) before 1.1.2 use root privileges during read access to files and… (no CVSS)
- [CVE-2010-3853](https://cve.now/CVE-2010-3853.md): pam\_namespace.c in the pam\_namespace module in Linux-PAM (aka pam) before 1.1.3 uses the environment of the invoking application or… (no CVSS)
- [CVE-2010-3927](https://cve.now/CVE-2010-3927.md): Untrusted search path vulnerability in Lunascape before 6.4.0 allows local users to gain privileges via a Trojan horse DLL in the current… (no CVSS)
- [CVE-2011-0020](https://cve.now/CVE-2011-0020.md): Heap-based buffer overflow in the pango\_ft2\_font\_render\_box\_glyph function in pango/pangoft2-render.c in libpango in Pango 1.28.3 and… (no CVSS)
- [CVE-2011-0274](https://cve.now/CVE-2011-0274.md): Cross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 7.x through 7.55 and 8.x through 8.05, and Business… (no CVSS)
- [CVE-2011-0352](https://cve.now/CVE-2011-0352.md): Buffer overflow in the web-based management interface on the Cisco Linksys WRT54GC router with firmware before 1.06.1 allows remote… (no CVSS)
- [CVE-2011-0410](https://cve.now/CVE-2011-0410.md): CollabNet ScrumWorks Basic 1.8.4 uses cleartext credentials for network communication and the internal database, which makes it easier for… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2011-01-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.