# CVEs published 2011-01-24

13 CVEs were published on January 24, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2010-4706](https://cve.now/CVE-2010-4706.md): The pam\_sm\_close\_session function in pam\_xauth.c in the pam\_xauth module in Linux-PAM (aka pam) 1.1.2 and earlier does not properly handle a (no CVSS)
- [CVE-2010-4707](https://cve.now/CVE-2010-4707.md): The check\_acl function in pam\_xauth.c in the pam\_xauth module in Linux-PAM (aka pam) 1.1.2 and earlier does not verify that a certain ACL fi (no CVSS)
- [CVE-2010-4708](https://cve.now/CVE-2010-4708.md): The pam\_env module in Linux-PAM (aka pam) 1.1.2 and earlier reads the .pam\_environment file in a user's home directory, which might allow lo (no CVSS)
- [CVE-2010-3316](https://cve.now/CVE-2010-3316.md): The run\_coprocess function in pam\_xauth.c in the pam\_xauth module in Linux-PAM (aka pam) before 1.1.2 does not check the return values of th (no CVSS)
- [CVE-2010-3430](https://cve.now/CVE-2010-3430.md): The privilege-dropping implementation in the (1) pam\_env and (2) pam\_mail modules in Linux-PAM (aka pam) 1.1.2 does not perform the required (no CVSS)
- [CVE-2010-3431](https://cve.now/CVE-2010-3431.md): The privilege-dropping implementation in the (1) pam\_env and (2) pam\_mail modules in Linux-PAM (aka pam) 1.1.2 does not check the return val (no CVSS)
- [CVE-2010-3435](https://cve.now/CVE-2010-3435.md): The (1) pam\_env and (2) pam\_mail modules in Linux-PAM (aka pam) before 1.1.2 use root privileges during read access to files and directories (no CVSS)
- [CVE-2010-3853](https://cve.now/CVE-2010-3853.md): pam\_namespace.c in the pam\_namespace module in Linux-PAM (aka pam) before 1.1.3 uses the environment of the invoking application or service (no CVSS)
- [CVE-2010-3927](https://cve.now/CVE-2010-3927.md): Untrusted search path vulnerability in Lunascape before 6.4.0 allows local users to gain privileges via a Trojan horse DLL in the current wo (no CVSS)
- [CVE-2011-0020](https://cve.now/CVE-2011-0020.md): Heap-based buffer overflow in the pango\_ft2\_font\_render\_box\_glyph function in pango/pangoft2-render.c in libpango in Pango 1.28.3 and earlie (no CVSS)
- [CVE-2011-0274](https://cve.now/CVE-2011-0274.md): Cross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 7.x through 7.55 and 8.x through 8.05, and Business Servic (no CVSS)
- [CVE-2011-0352](https://cve.now/CVE-2011-0352.md): Buffer overflow in the web-based management interface on the Cisco Linksys WRT54GC router with firmware before 1.06.1 allows remote attacker (no CVSS)
- [CVE-2011-0410](https://cve.now/CVE-2011-0410.md): CollabNet ScrumWorks Basic 1.8.4 uses cleartext credentials for network communication and the internal database, which makes it easier for c (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-01-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.