CVE-2006-3083
The (1) krshd and (2) v4rcp applications in (a) MIT Kerberos 5 (krb5) up to 1.5, and 1.4.x before 1.4.4, when running on Linux and AIX, and (b) Heimdal 0.7.2 and earlier, do not check return codes for setuid calls, which allows local users to gain…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.53%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
The (1) krshd and (2) v4rcp applications in (a) MIT Kerberos 5 (krb5) up to 1.5, and 1.4.x before 1.4.4, when running on Linux and AIX, and (b) Heimdal 0.7.2 and earlier, do not check return codes for setuid calls, which allows local users to gain privileges by causing setuid to fail to drop privileges using attacks such as resource exhaustion.
- CVSS 2.0
- 7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 0.53% probability · 43th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-399
- Affected
- heimdal/heimdal · mit/kerberos 5
- Source
- cve@mitre.org
References
- ftp://ftp.pdc.kth.se/pub/heimdal/src/heimdal-0.7.2-setuid-patch.txt
- http://secunia.com/advisories/21402Vendor Advisory
- http://secunia.com/advisories/21423Vendor Advisory
- http://secunia.com/advisories/21436Vendor Advisory
- http://secunia.com/advisories/21439Vendor Advisory
- http://secunia.com/advisories/21441Vendor Advisory
- http://secunia.com/advisories/21456Vendor Advisory
- http://secunia.com/advisories/21461Vendor Advisory
- http://secunia.com/advisories/21467Vendor Advisory
- http://secunia.com/advisories/21527Vendor Advisory
- http://secunia.com/advisories/21613Vendor Advisory
- http://secunia.com/advisories/21847Vendor Advisory
- http://secunia.com/advisories/22291Vendor Advisory
- http://security.gentoo.org/glsa/glsa-200608-21.xml
- http://securitytracker.com/id?1016664
- http://support.avaya.com/elmodocs2/security/ASA-2006-211.htm
- http://web.mit.edu/Kerberos/advisories/MITKRB5-SA-2006-001-setuid.txtPatch, Vendor Advisory
- http://www.debian.org/security/2006/dsa-1146
- http://www.gentoo.org/security/en/glsa/glsa-200608-15.xml
- http://www.kb.cert.org/vuls/id/580124Patch, US Government Resource
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:139
- http://www.novell.com/linux/security/advisories/2006_20_sr.html
- http://www.novell.com/linux/security/advisories/2006_22_sr.html
- http://www.osvdb.org/27869
- http://www.osvdb.org/27870
- http://www.pdc.kth.se/heimdal/advisory/2006-08-08/
- http://www.redhat.com/support/errata/RHSA-2006-0612.htmlPatch, Vendor Advisory
- http://www.securityfocus.com/archive/1/442599/100/0/threaded
- http://www.securityfocus.com/archive/1/443498/100/100/threaded
- http://www.securityfocus.com/bid/19427
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.