Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2006-3084HistoryAug 09, 2006 - 10:04 a.m.
CVE-2006-3084
2006-08-0910:04:00
Debian Security Bug Tracker
security-tracker.debian.org
20
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
EPSS
0.001
Percentile
28.2%
The (1) ftpd and (2) ksu programs in (a) MIT Kerberos 5 (krb5) up to 1.5, and 1.4.x before 1.4.4, and (b) Heimdal 0.7.2 and earlier, do not check return codes for setuid calls, which might allow local users to gain privileges by causing setuid to fail to drop privileges. NOTE: as of 20060808, it is not known whether an exploitable attack scenario exists for these issues.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | krb5 | < 1.4.3-9 | krb5_1.4.3-9_all.deb |
| Debian | 11 | all | krb5 | < 1.4.3-9 | krb5_1.4.3-9_all.deb |
| Debian | 999 | all | krb5 | < 1.4.3-9 | krb5_1.4.3-9_all.deb |
| Debian | 13 | all | krb5 | < 1.4.3-9 | krb5_1.4.3-9_all.deb |
Related
cvelist
cvelist
CVE-2006-3084
2006-08-09 10:00:00
ubuntucve
ubuntucve
CVE-2006-3084
2006-08-09 00:00:00
nvd
nvd
CVE-2006-3084
2006-08-09 10:04:00
cve
cve
CVE-2006-3084
2006-08-09 10:04:00
openvas
openvas
Gentoo Security Advisory GLSA 200608-15 (MIT Kerberos 5)
2008-09-24 00:00:00
Debian Security Advisory DSA 1146-1 (krb5)
2008-01-17 00:00:00
Gentoo Security Advisory GLSA 200608-21 (Heimdal)
2008-09-24 00:00:00
nessus
nessus
GLSA-200608-15 : MIT Kerberos 5: Multiple local privilege escalation vulnerabilities
2006-08-14 00:00:00
Fedora Core 5 : krb5-1.4.3-5.3 (2007-034)
2007-01-17 00:00:00
Debian DSA-1146-1 : krb5 - programming error
2006-10-14 00:00:00
debian
debian
[SECURITY] [DSA 1146-1] New krb5 packages fix privilege escalation
2006-08-09 06:10:06
fedora
fedora
[SECURITY] Fedora Core 5 Update: krb5-1.4.3-5.3
2007-01-09 22:09:07
[SECURITY] Fedora Core 5 Update: krb5-1.4.3-5.4
2007-04-03 20:14:48
[SECURITY] Fedora Core 5 Update: krb5-1.4.3-5.5
2007-06-28 13:30:51
gentoo
gentoo
MIT Kerberos 5: Multiple local privilege escalation vulnerabilities
2006-08-10 00:00:00
Heimdal: Multiple local privilege escalation vulnerabilities
2006-08-23 00:00:00
securityvulns
securityvulns
MITKRB-SA-2006-001: multiple local privilege escalation vulnerabilities
2006-08-09 00:00:00
ubuntu
ubuntu
krb5 vulnerabilities
2006-08-16 00:00:00
Thunderbird vulnerabilities
2006-07-29 00:00:00
cert
cert
oraclelinux
oraclelinux
Critical: krb5 security update
2007-04-04 00:00:00
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
EPSS
0.001
Percentile
28.2%
Related for DEBIANCVE:CVE-2006-3084