CVE-2010-3431

CVE-2010-3431 describes a privilege-dropping vulnerability in the pam_env and pam_mail modules of Linux-PAM 1.1.2. This flaw, an incomplete fix for a previous CVE, allows local users to potentially access sensitive information due to the system not properly checking the return value of the setfsuid system call, which could lead to an unintended user ID being used. With a CVSS score of 1.9 (low severity), exploitation requires local access and medium attack complexity, primarily impacting confidentiality. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.