libgssglue vulnerability

2012-10-1500:00:00

ubuntu.com

6.2 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.2%

JSON

Releases

Ubuntu 12.04
Ubuntu 11.10
Ubuntu 11.04
Ubuntu 10.04

Packages

libgssglue - header files and docs for libgssglue

Details

It was discovered that libgssglue incorrectly handled the GSSAPI_MECH_CONF
environment variable when running a privileged binary. A local attacker could
exploit this to gain root privileges. (CVE-2011-2709)

OSVersionArchitecturePackageVersionFilename
Ubuntu12.04noarchlibgssglue1< 0.3-4ubuntu0.1UNKNOWN
Ubuntu12.04noarchlibgssglue-dev< 0.3-4ubuntu0.1UNKNOWN
Ubuntu11.10noarchlibgssglue1< 0.3-1ubuntu1.1UNKNOWN
Ubuntu11.10noarchlibgssglue-dev< 0.3-1ubuntu1.1UNKNOWN
Ubuntu11.04noarchlibgssglue1< 0.1-4ubuntu1.1UNKNOWN
Ubuntu11.04noarchlibgssglue-dev< 0.1-4ubuntu1.1UNKNOWN
Ubuntu10.04noarchlibgssglue1< 0.1-4ubuntu0.1UNKNOWN
Ubuntu10.04noarchlibgssglue-dev< 0.1-4ubuntu0.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	12.04	noarch	libgssglue1	< 0.3-4ubuntu0.1	UNKNOWN
Ubuntu	12.04	noarch	libgssglue-dev	< 0.3-4ubuntu0.1	UNKNOWN
Ubuntu	11.10	noarch	libgssglue1	< 0.3-1ubuntu1.1	UNKNOWN
Ubuntu	11.10	noarch	libgssglue-dev	< 0.3-1ubuntu1.1	UNKNOWN
Ubuntu	11.04	noarch	libgssglue1	< 0.1-4ubuntu1.1	UNKNOWN
Ubuntu	11.04	noarch	libgssglue-dev	< 0.1-4ubuntu1.1	UNKNOWN
Ubuntu	10.04	noarch	libgssglue1	< 0.1-4ubuntu0.1	UNKNOWN
Ubuntu	10.04	noarch	libgssglue-dev	< 0.1-4ubuntu0.1	UNKNOWN