CVE-2010-0832

pam_motd (aka the MOTD module) in libpam-modules before 1.1.0-2ubuntu1.1 in PAM on Ubuntu 9.10 and libpam-modules before 1.1.1-2ubuntu5 in PAM on Ubuntu 10.04 LTS allows local users to change the ownership of arbitrary files via a symlink attack on .cache in a user's home directory, related to "user file stamps" and the motd.legal-notice file.

• CWE-59

• http://secunia.com/advisories/40512Vendor Advisory
• http://twitter.com/jonoberheide/statuses/18009527979
• http://www.exploit-db.com/exploits/14273Exploit
• http://www.h-online.com/security/news/item/Ubuntu-closes-root-hole-1034618.html
• http://www.osvdb.org/66116
• http://www.securityfocus.com/bid/41465Exploit, Patch
• http://www.ubuntu.com/usn/USN-959-1Vendor Advisory
• http://www.vupen.com/english/advisories/2010/1747Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/60194
• http://secunia.com/advisories/40512Vendor Advisory
• http://twitter.com/jonoberheide/statuses/18009527979
• http://www.exploit-db.com/exploits/14273Exploit
• http://www.h-online.com/security/news/item/Ubuntu-closes-root-hole-1034618.html
• http://www.osvdb.org/66116
• http://www.securityfocus.com/bid/41465Exploit, Patch
• http://www.ubuntu.com/usn/USN-959-1Vendor Advisory
• http://www.vupen.com/english/advisories/2010/1747Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/60194

Published

Jul 12, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-0826The Free Software Foundation (FSF) Berkeley DB NSS module (a…
• CVE-2010-0827Integer overflow in dvips in TeX Live 2009 and earlier, and …
• CVE-2010-0828Cross-site scripting (XSS) vulnerability in action/Despam.py…
• CVE-2010-0829Multiple array index errors in set.c in dvipng 1.11 and 1.12…
• CVE-2010-0830Integer signedness error in the elf_get_dynamic_info functio…
• CVE-2010-0831Directory traversal vulnerability in the extract_jar functio…
• CVE-2010-0833The pam_lsass library in Likewise Open 5.4 and CIFS 5.4 befo…
• CVE-2010-0834The base-files package before 5.0.0ubuntu7.1 on Ubuntu 9.10 …
• CVE-2010-0835Unspecified vulnerability in the Wireless component in Oracl…
• CVE-2010-0836Unspecified vulnerability in the Oracle Knowledge Management…
• CVE-2010-0837Unspecified vulnerability in the Pack200 component in Oracle…
• CVE-2010-0838Unspecified vulnerability in the Java 2D component in Oracle…