CVE-2010-4707

CVE-2010-4707 describes a denial-of-service vulnerability in the pam_xauth module of Linux-PAM versions 1.1.2 and earlier. The flaw lies in the check_acl function, which fails to verify if an ACL file is a regular file, allowing local users to exploit this by providing a special file and causing resource exhaustion. With a CVSS score of 4.9, this vulnerability is considered medium severity, requiring local access and low attack complexity to achieve a denial of service. There is no evidence of active exploitation, nor is there any publicly available exploit code or significant community discussion surrounding this CVE.