CVE-2011-1758

N/A

Description

The krb5_save_ccname_done function in providers/krb5/krb5_auth.c in System Security Services Daemon (SSSD) 1.5.x before 1.5.7, when automatic ticket renewal and offline authentication are configured, uses a pathname string as a password, which allows local users to bypass Kerberos authentication by listing the /tmp directory to obtain the pathname.

Details CVE

Score CVSS v3.1N/A

Publie5/26/2011

Derniere modification4/29/2026

Sourcenvd

Observations honeypot0

Produits affectes

fedoraproject:sssd

Faiblesses (CWE)

CWE-287

References

http://git.fedorahosted.org/git/?p=sssd.git%3Ba=commit%3Bh=fffdae81651b460f3d2c119c56d5caa09b4de42a(secalert@redhat.com)

http://lists.fedoraproject.org/pipermail/package-announce/2011-May/059532.html(secalert@redhat.com)

http://lists.fedoraproject.org/pipermail/package-announce/2011-May/059619.html(secalert@redhat.com)

http://openwall.com/lists/oss-security/2011/04/29/4(secalert@redhat.com)

https://bugzilla.redhat.com/show_bug.cgi?id=700867(secalert@redhat.com)

https://bugzilla.redhat.com/show_bug.cgi?id=700891(secalert@redhat.com)

https://fedorahosted.org/pipermail/sssd-devel/2011-April/006138.html(secalert@redhat.com)

https://fedorahosted.org/sssd/ticket/856(secalert@redhat.com)

https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.7(secalert@redhat.com)

http://git.fedorahosted.org/git/?p=sssd.git%3Ba=commit%3Bh=fffdae81651b460f3d2c119c56d5caa09b4de42a(af854a3a-2127-422b-91ae-364da2661108)

http://lists.fedoraproject.org/pipermail/package-announce/2011-May/059532.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.fedoraproject.org/pipermail/package-announce/2011-May/059619.html(af854a3a-2127-422b-91ae-364da2661108)

http://openwall.com/lists/oss-security/2011/04/29/4(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.redhat.com/show_bug.cgi?id=700867(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.redhat.com/show_bug.cgi?id=700891(af854a3a-2127-422b-91ae-364da2661108)

https://fedorahosted.org/pipermail/sssd-devel/2011-April/006138.html(af854a3a-2127-422b-91ae-364da2661108)

https://fedorahosted.org/sssd/ticket/856(af854a3a-2127-422b-91ae-364da2661108)

https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.7(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.