CVE-2009-0361

CVE-2009-0361 concerns pam_krb5 in libpam-krb5 and related components. Concrete details in connected documents show that pam_krb5 fails to handle pam_setcred correctly when a process runs setuid, enabling a local user to create or modify arbitrary files by setting the KRB5CCNAME environment varia...

Debian Security Advisory DSA 1722-1 (libpam-heimdal)

The remote host is missing an update to libpam-heimdal announced via advisory DSA 1722-1. OpenVAS Vulnerability Test $Id: deb17221.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1722-1 libpam-heimdal Authors: Thomas Reinke Copyright: Copyright c 2009 E-Sof...

Debian: Security Advisory (DSA-1722-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1722-1 : libpam-heimdal - programming error

Derek Chan discovered that the PAM module for the Heimdal Kerberos implementation allows reinitialisation of user credentials when run from a setuid context, resulting in potential local denial of service by overwriting the credential cache file or to local privilege escalation. %NASLMINLEVEL 703...

[SECURITY] [DSA 1722-1] New libpam-heimdal packages fix local privilege escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1722-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 11, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1722-1] New libpam-heimdal packages fix local privilege escalation

------------------------------------------------------------------------ Debian Security Advisory DSA-1722-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 11, 2009 http://www.debian.org/security/faq -...

DSA-1722-1 libpam-heimdal - local privilege

Bulletin has no description...