PT-2002-1776 · Mit+1 · Kerberos 5+1

Published 2002-08-12 · Updated 2008-09-05 · CVE-2002-0755

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions FreeBSD versions 4.5 and earlier k5su in Kerberos 5

Description The issue is related to the k5su component in Kerberos 5, which does not properly verify user membership in the wheel group before granting superuser privileges. This could potentially allow unauthorized users to execute commands as root.

Recommendations For FreeBSD versions 4.5 and earlier, update to a version that includes the fix for this issue. For k5su in Kerberos 5, ensure that proper group membership verification is implemented to prevent unauthorized access to superuser privileges.

Fix

Related Identifiers

CVE-2002-0755

Affected Products

Freebsd

Kerberos 5

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2002-0755 · Security Note
• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:24.k5su.asc · Vendor Advisory
• http://securityfocus.com/bid/4777 · Vendor Advisory
• http://iss.net/security_center/static/9125.php · Vendor Advisory
• http://osvdb.org/4893 · Note