CVE-2002-0754 Kerberos 5 su (k5su) in FreeBSD 4.4 and earlier relies on the getlogin system call to determine if the user running k5su is root, which could allow a root-initiated process to regain its privileges af...
HighCVSS 7.2
EPSS 0.39%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Kerberos 5 su (k5su) in FreeBSD 4.4 and earlier relies on the getlogin system call to determine if the user running k5su is root, which could allow a root-initiated process to regain its privileges after it has dropped them.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| freebsd heimdal | = 0.4e | No fix listed |
| kth heimdal | = 0.4e | No fix listed |
| freebsd | = 4.0 | No fix listed |
| freebsd | = 4.1 | No fix listed |
| freebsd | = 4.1.1 | No fix listed |
| freebsd | = 4.1.1-release | No fix listed |
| freebsd | = 4.1.1-stable | No fix listed |
| freebsd | = 4.2 | No fix listed |
| freebsd | = 4.2-stable | No fix listed |
| freebsd | = 4.3 | No fix listed |
| freebsd | = 4.3-release | No fix listed |
| freebsd | = 4.3-stable | No fix listed |
| freebsd | = 4.4 | No fix listed |
References
- kerberos5-k5su-elevate-privileges(7956) patch vdb-entry vendor-advisory
- 3919 patch vdb-entry vendor-advisory