Lucene search
HistoryApr 02, 2003 - 5:00 a.m.
CVE-2002-0755
kerberos
su
k5su
freebsd
unauthorized access
root access
security vulnerability
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
7.3 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
25.1%
Kerberos 5 su (k5su) in FreeBSD 4.5 and earlier does not verify that a user is a member of the wheel group before granting superuser privileges, which could allow unauthorized users to execute commands as root.
Affected configurations
Node
freebsdfreebsdMatch4.4release
ORfreebsdfreebsdMatch4.5release
| CPE | Name | Operator | Version |
|---|---|---|---|
| freebsd:freebsd | freebsd | eq | 4.4 |
| freebsd:freebsd | freebsd | eq | 4.5 |
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
7.3 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
25.1%
Related for CVE-2002-0755