PT-2002-1776 · Mit+1 · Kerberos 5+1

Publicado 2002-08-12 · Atualizado 2008-09-05 · CVE-2002-0755

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions FreeBSD versions 4.5 and earlier k5su in Kerberos 5

Description The issue is related to the k5su component in Kerberos 5, which does not properly verify user membership in the wheel group before granting superuser privileges. This could potentially allow unauthorized users to execute commands as root.

Recommendations For FreeBSD versions 4.5 and earlier, update to a version that includes the fix for this issue. For k5su in Kerberos 5, ensure that proper group membership verification is implemented to prevent unauthorized access to superuser privileges.

Correção

Identificadores relacionados

CVE-2002-0755

Produtos afetados

Freebsd

Kerberos 5

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2002-0755 · Nota de Segurança
• http://osvdb.org/4893 · Nota
• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:24.k5su.asc · Aviso do Fabricante
• http://securityfocus.com/bid/4777 · Aviso do Fabricante
• http://iss.net/security_center/static/9125.php · Aviso do Fabricante