GLSA 200903-39: pam_krb5: Privilege escalation
Severity: | high |
Title: | pam_krb5: Privilege escalation |
Date: | 03/25/2009 |
Bugs: |
|
ID: | 200903-39 |
Synopsis
Two vulnerabilities in pam_krb5 might allow local users to elevate their privileges or overwrite arbitrary files.Background
pam_krb5 is a a Kerberos v5 PAM module.
Affected packages
Package | Vulnerable | Unaffected | Architecture(s) |
---|---|---|---|
sys-auth/pam_krb5 | < 3.12 | >= 3.12 | All supported architectures |
Description
The following vulnerabilities were discovered:
- pam_krb5 does not properly initialize the Kerberos libraries for setuid use (CVE-2009-0360).
- Derek Chan reported that calls to pam_setcred() are not properly handled when running setuid (CVE-2009-0361).
Impact
A local attacker could set an environment variable to point to a specially crafted Kerberos configuration file and launch a PAM-based setuid application to elevate privileges, or change ownership and overwrite arbitrary files.
Workaround
There is no known workaround at this time.
Resolution
All pam_krb5 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=sys-auth/pam_krb5-3.12"
References
Availability
This GLSA and any updates to it are available for viewing at the Gentoo Security Website:
Concerns?
Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org.
License
Copyright 2010 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license.