title: Red Hat Security Advisory: pam security update
description: pam: pam_xauth missing return value checks from setuid() and similar calls pam: pam_env and pam_mail accessing users' file with root privileges pam: pam_namespace executes namespace.init with service's environment pam: pam_xauth: Does not check if certain ACL file is a regular file
cpes: cpe:/o:redhat:enterprise_linux:5::client cpe:/o:redhat:enterprise_linux:5::client_workstation cpe:/o:redhat:enterprise_linux:5::server