pam-xdg-support, as used in Ubuntu 12.10, does not properly handle the PATH environment variable, which allows local users to gain privileges via unspecified vectors related to sudo.Referenceshttp://www.securityfocus.com/bid/58550http://www.ubuntu.com/usn/USN-1766-1https://exchange.xforce.ibmcloud.com/vulnerabilities/82918