Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

pam-krb5 project pam-krb5 vulnerabilities and exploits

(subscribe to this query)
6.2
CVSSv2
CVE-2009-0360
Russ Allbery pam-krb5 prior to 3.13, when linked against MIT Kerberos, does not properly initialize the Kerberos libraries for setuid use, which allows local users to gain privileges by pointing an environment variable to a modified Kerberos configuration file, and then launching...
Eyrie Pam-krb5 3.8Eyrie Pam-krb5 3.7Eyrie Pam-krb5 3.0Eyrie Pam-krb5 2.6Eyrie Pam-krb5Eyrie Pam-krb5 3.11Eyrie Pam-krb5 3.4Eyrie Pam-krb5 3.3Eyrie Pam-krb5 2.3Eyrie Pam-krb5 2.2Eyrie Pam-krb5 3.10Eyrie Pam-krb5 3.9Eyrie Pam-krb5 3.2Eyrie Pam-krb5 3.1Eyrie Pam-krb5 2.1Eyrie Pam-krb5 2.0Eyrie Pam-krb5 3.6Eyrie Pam-krb5 3.5Eyrie Pam-krb5 2.5Eyrie Pam-krb5 2.4
4.6
CVSSv2
CVE-2009-0361
Russ Allbery pam-krb5 prior to 3.13, as used by libpam-heimdal, su in Solaris 10, and other software, does not properly handle calls to pam_setcred when running setuid, which allows local users to overwrite and change the ownership of arbitrary files by setting the KRB5CCNAME env...
Eyrie Pam-krb5 3.2Eyrie Pam-krb5 3.3Eyrie Pam-krb5Eyrie Pam-krb5 3.0Eyrie Pam-krb5 3.1Eyrie Pam-krb5 3.6Eyrie Pam-krb5 3.7Eyrie Pam-krb5 3.10Eyrie Pam-krb5 3.11Eyrie Pam-krb5 3.8Eyrie Pam-krb5 3.9Eyrie Pam-krb5 3.4Eyrie Pam-krb5 3.5
7.5
CVSSv2
CVE-2020-10595
pam-krb5 prior to 4.9 has a buffer overflow that might cause remote code execution in situations involving supplemental prompting by a Kerberos library. It may overflow a buffer provided by the underlying Kerberos library by a single '\0' byte if an attacker responds to...
Pam-krb5 Project Pam-krb5Debian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-38002CVE-2006-4304CVE-2024-4336CVE-2024-33437CVE-2024-4340CVE-2024-27956privilegeinsecure direct object referenceXSSitem search icon">CVE-2024-25938
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook