CVE Vulnerability

CVE-2008-3825

pam_krb5 2.2.14 in Red Hat Enterprise Linux (RHEL) 5 and earlier, when the existing_ticket option is enabled, uses incorrect privileges when reading a Kerberos credential cache, which allows local users to gain privileges by setting the KRB5CCNAME environment variable to an arbitrary cache filename and running the (1) su or (2) sudo program. NOTE: there may be a related vector involving sshd that has limited relevance.

4.4 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 3.4 / Impact : 6.4

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

Scope

References
Link Resource
http://www.redhat.com/support/errata/RHSA-2008-0907.html
https://bugzilla.redhat.com/show_bug.cgi?id=461960
http://www.securitytracker.com/id?1020978
https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00166.html
http://secunia.com/advisories/32119
https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00150.html
http://secunia.com/advisories/32174
http://www.mandriva.com/security/advisories?name=MDVSA-2008:209
http://secunia.com/advisories/32135
http://www.securityfocus.com/bid/31534
http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00002.html
http://www.vmware.com/security/advisories/VMSA-2011-0003.html
http://secunia.com/advisories/43314
https://exchange.xforce.ibmcloud.com/vulnerabilities/45635
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10923
http://www.securityfocus.com/archive/1/516397/100/0/threaded
Configurations

Configuration 1

cpe:2.3:o:redhat:enterprise_linux:5:unknown:server:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_desktop:5:unknown:client:*:*:*:*:*
Information

Published : 2008-10-03 03:07

Updated : 2018-10-11 08:49

NVD link : CVE-2008-3825

Mitre link : CVE-2008-3825

Products Affected
No products.
CWE
CWE-264