PT-2012-1130 · Unknown+1 · Libgssglue+1

Josh Bressers · Published 2012-06-21 · Updated 2024-06-15 · CVE-2011-2709

Positive Technologies (AI Summary)

CVSS v2.0

6.2

Medium

Base vector

AV:L/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions libgssglue versions prior to 0.4 libgssapi versions prior to 0.4

Description The issue concerns a problem with privilege checking in libgssapi and libgssglue, which can be exploited locally. This can lead to the execution of arbitrary code via the GSSAPI MECH CONF environment variable. For example, this can be demonstrated using mount.nfs. The exploitation of this issue may result in a breach of confidentiality, integrity, and availability of protected information.

Recommendations For libgssglue versions prior to 0.4, update to version 0.4 or later to resolve the issue. For libgssapi versions prior to 0.4, update to version 0.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the GSSAPI MECH CONF environment variable to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

BDU:2015-09657

CVE-2011-2709

OPENSUSE-SU-2024:10085-1

Affected Products

Libgssapi

Libgssglue

References · 20

• https://osv.dev/vulnerability/openSUSE-SU-2024:10085-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-2709 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2011-2709 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-2709 · Security Note
• http://secunia.com/advisories/45075 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09657 · Security Note
• http://lwn.net/Alerts/449415 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082297.html · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082072.html · Vendor Advisory
• http://citi.umich.edu/projects/nfsv4/linux/libgssglue/libgssglue-0.4.tar.gz · Patch
• https://security-tracker.debian.org/tracker/CVE-2011-2709 · Vendor Advisory
• https://suse.com/security/cve/CVE-2011-2709 · Note
• http://openwall.com/lists/oss-security/2011/08/12/10 · Note
• http://secunia.com/advisories/50973 · Note
• http://secunia.com/advisories/50785 · Note