Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-2709
HistoryJun 21, 2012 - 12:00 a.m.

CVE-2011-2709

2012-06-2100:00:00
ubuntu.com
ubuntu.com
7

0.0004 Low

EPSS

Percentile

5.2%

libgssapi and libgssglue before 0.4 do not properly check privileges, which
allows local users to load untrusted configuration files and execute
arbitrary code via the GSSAPI_MECH_CONF environment variable, as
demonstrated using mount.nfs.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchlibgssglue< 0.1-4ubuntu0.1UNKNOWN
ubuntu11.04noarchlibgssglue< 0.1-4ubuntu1.1UNKNOWN
ubuntu11.10noarchlibgssglue< 0.3-1ubuntu1.1UNKNOWN
ubuntu12.04noarchlibgssglue< 0.3-4ubuntu0.1UNKNOWN

0.0004 Low

EPSS

Percentile

5.2%