National Cyber-Alert System

Vulnerability Summary for CVE-2009-0361

Overview

Russ Allbery pam-krb5 before 3.13, as used by libpam-heimdal, su in Solaris 10, and other software, does not properly handle calls to pam_setcred when running setuid, which allows local users to overwrite and change the ownership of arbitrary files by setting the KRB5CCNAME environment variable, and then launching a setuid application that performs certain pam_setcred operations.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

Vendor Statments (disclaimer)

Official Statement from Red Hat (02/13/2009)

Not vulnerable. This issue did not affect the versions of the pam_krb5 package, as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: VUPEN

Name: ADV-2009-0410

Type: Advisory; Patch Information

Hyperlink:http://www.frsirt.com/english/advisories/2009/0410

External Source: VUPEN

Name: ADV-2009-0979

Hyperlink:http://www.vupen.com/english/advisories/2009/0979

External Source: UBUNTU

Name: USN-719-1

Hyperlink:http://www.ubuntu.com/usn/USN-719-1

External Source: BID

Name: 33741

Hyperlink:http://www.securityfocus.com/bid/33741

External Source: BUGTRAQ

Name: 20090211 pam-krb5 security advisory (3.12 and earlier)

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/500892/100/0/threaded

External Source: VUPEN

Name: ADV-2009-0426

Hyperlink:http://www.frsirt.com/english/advisories/2009/0426

External Source: MISC

Name: http://www.eyrie.org/~eagle/software/pam-krb5/security/2009-02-11.html

Hyperlink:http://www.eyrie.org/~eagle/software/pam-krb5/security/2009-02-11.html

External Source: DEBIAN

Name: DSA-1722

Hyperlink:http://www.debian.org/security/2009/dsa-1722

External Source: DEBIAN

Name: DSA-1721

Hyperlink:http://www.debian.org/security/2009/dsa-1721

External Source: CONFIRM

Name: http://support.avaya.com/elmodocs2/security/ASA-2009-070.htm

Hyperlink:http://support.avaya.com/elmodocs2/security/ASA-2009-070.htm

External Source: SUNALERT

Name: 252767

Hyperlink:http://sunsolve.sun.com/search/document.do?assetkey=1-66-252767-1

External Source: SECTRACK

Name: 1021711

Hyperlink:http://securitytracker.com/id?1021711

External Source: GENTOO

Name: GLSA-200903-39

Hyperlink:http://security.gentoo.org/glsa/glsa-200903-39.xml

External Source: SECUNIA

Name: 34449

Hyperlink:http://secunia.com/advisories/34449

External Source: SECUNIA

Name: 34260

Hyperlink:http://secunia.com/advisories/34260

External Source: SECUNIA

Name: 33918

Type: Advisory

Hyperlink:http://secunia.com/advisories/33918

External Source: SECUNIA

Name: 33917

Type: Advisory

Hyperlink:http://secunia.com/advisories/33917

External Source: SECUNIA

Name: 33914

Type: Advisory

Hyperlink:http://secunia.com/advisories/33914