CVE-2011-2709 libgssapi and libgssglue before 0.4 do not properly check privileges, which allows local users to load untrusted configuration files and execute arbitrary code via the GSSAPI_MECH_CONF environment var...
MediumCVSS 6.2
EPSS 0.44%
- Published
- Updated
- Exploit status
- No public exploit known
Description
libgssapi and libgssglue before 0.4 do not properly check privileges, which allows local users to load untrusted configuration files and execute arbitrary code via the GSSAPI_MECH_CONF environment variable, as demonstrated using mount.nfs.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libgssglue(Debian:12) | < 0.4-1 | 0.4-1 |
| debian/libgssglue(Debian:13) | < 0.4-1 | 0.4-1 |
| debian/libgssglue(Debian:14) | < 0.4-1 | 0.4-1 |
| umich libgssglue | <= 0.3 | No fix listed |
| umich libgssglue | = 0.1 | No fix listed |
| umich libgssglue | = 0.2 | No fix listed |
| umich libgssapi | <= 0.3 | No fix listed |
| umich libgssapi | = 0.1 | No fix listed |
| umich libgssapi | = 0.2 | No fix listed |
References
- Debian Security Tracker CVE-2011-2709 vendor-advisory
- FEDORA-2012-8067 vendor-advisory
- FEDORA-2012-7971 vendor-advisory
- SUSE-SU-2011:0696 vendor-advisory
- 45075 third-party-advisory vendor-advisory
- 50785 third-party-advisory
- 50973 third-party-advisory
- www.citi.umich.edu patch
- [oss-security] 20110721 CVE Request -- libgssapi, libgssglue -- Ability to load untrusted configuration file, when loading GSS mechanisms and their definitions during initialization mailing-list
- [oss-security] 20110722 Re: CVE Request -- libgssapi, libgssglue -- Ability to load untrusted configuration file, when loading GSS mechanisms and their definitions during initialization mailing-list
- [oss-security] 20110812 Re: CVE Request -- libgssapi, libgssglue -- Ability to load untrusted configuration file, when loading GSS mechanisms and their definitions during initialization mailing-list
- 48490 vdb-entry
- bugzilla.novell.com
- bugs.debian.org issue-tracking