---
cve: "CVE-2010-0832"
severity: "LOW"
cvss: 3.1
epss: "95%"
vendor: "n/a"
kev: false
exploited: false
published: "2010-07-12 16:30:01"
tags: [cve, security, low]
source: tsecurity.de CVE-Dossier
exported: "2026-09-10T01:14:25+02:00"
---

# CVE-2010-0832

> 3.1 LOW · 🧪 PoC

## Beschreibung

pam_motd (aka the MOTD module) in libpam-modules before 1.1.0-2ubuntu1.1 in PAM on Ubuntu 9.10 and libpam-modules before 1.1.1-2ubuntu5 in PAM on Ubuntu 10.04 LTS allows local users to change the ownership of arbitrary files via a symlink attack on .cache in a user's home directory, related to "user file stamps" and the motd.legal-notice file.

## Exploit-Evidenz

- [EDB-14339 — Linux PAM 1.1.0 (Ubuntu 9.10/10.04) - MOTD File Tampering Privilege Escalation (2)](https://www.exploit-db.com/exploits/14339) ✅
- [EDB-14273 — Linux PAM 1.1.0 (Ubuntu 9.10/10.04) - MOTD File Tampering Privilege Escalation (1)](https://www.exploit-db.com/exploits/14273) ✅

## Referenzen

- <https://exchange.xforce.ibmcloud.com/vulnerabilities/60194>
- <http://www.ubuntu.com/usn/USN-959-1>
- <http://www.securityfocus.com/bid/41465>
- <http://www.exploit-db.com/exploits/14273>
- <http://www.h-online.com/security/news/item/Ubuntu-closes-root-hole-1034618.html>
- <http://twitter.com/jonoberheide/statuses/18009527979>
- <http://secunia.com/advisories/40512>
- <http://www.osvdb.org/66116>
- <http://www.vupen.com/english/advisories/2010/1747>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2010-0832) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_