CVE-2010-3435

CVE-2010-3435 describes a local information disclosure vulnerability affecting the pam_env and pam_mail modules in Linux-PAM versions prior to 1.1.2. These modules improperly handle root privileges when accessing user-owned files, allowing a local attacker to potentially read sensitive information via a symlink attack on files like .pam_environment. The vulnerability has a CVSS score of 4.7 (medium severity), indicating a local attack vector with medium complexity and high confidentiality impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.