CVE-2011-1758

N/A

Descricao

The krb5_save_ccname_done function in providers/krb5/krb5_auth.c in System Security Services Daemon (SSSD) 1.5.x before 1.5.7, when automatic ticket renewal and offline authentication are configured, uses a pathname string as a password, which allows local users to bypass Kerberos authentication by listing the /tmp directory to obtain the pathname.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado5/26/2011

Ultima modificacao4/29/2026

Fontenvd

Avistamentos honeypot0

Produtos afetados

fedoraproject:sssd

Fraquezas (CWE)

CWE-287

Referencias

http://git.fedorahosted.org/git/?p=sssd.git%3Ba=commit%3Bh=fffdae81651b460f3d2c119c56d5caa09b4de42a(secalert@redhat.com)

http://lists.fedoraproject.org/pipermail/package-announce/2011-May/059532.html(secalert@redhat.com)

http://lists.fedoraproject.org/pipermail/package-announce/2011-May/059619.html(secalert@redhat.com)

http://openwall.com/lists/oss-security/2011/04/29/4(secalert@redhat.com)

https://bugzilla.redhat.com/show_bug.cgi?id=700867(secalert@redhat.com)

https://bugzilla.redhat.com/show_bug.cgi?id=700891(secalert@redhat.com)

https://fedorahosted.org/pipermail/sssd-devel/2011-April/006138.html(secalert@redhat.com)

https://fedorahosted.org/sssd/ticket/856(secalert@redhat.com)

https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.7(secalert@redhat.com)

http://git.fedorahosted.org/git/?p=sssd.git%3Ba=commit%3Bh=fffdae81651b460f3d2c119c56d5caa09b4de42a(af854a3a-2127-422b-91ae-364da2661108)

http://lists.fedoraproject.org/pipermail/package-announce/2011-May/059532.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.fedoraproject.org/pipermail/package-announce/2011-May/059619.html(af854a3a-2127-422b-91ae-364da2661108)

http://openwall.com/lists/oss-security/2011/04/29/4(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.redhat.com/show_bug.cgi?id=700867(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.redhat.com/show_bug.cgi?id=700891(af854a3a-2127-422b-91ae-364da2661108)

https://fedorahosted.org/pipermail/sssd-devel/2011-April/006138.html(af854a3a-2127-422b-91ae-364da2661108)

https://fedorahosted.org/sssd/ticket/856(af854a3a-2127-422b-91ae-364da2661108)

https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.7(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.