Red Hat Security AdvisoryRHSA-2006:0612
krb5 security update
Released 2006-08-08 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 krb5-1.3.4-33, krb5-devel-1.3.4-33, krb5-devel-1.3.4-33.i386 +14
- Red Hat Enterprise Linux Desktop version 4 krb5-1.3.4-33, krb5-devel-1.3.4-33, krb5-devel-1.3.4-33.i386 +6
- Red Hat Enterprise Linux ES version 4 krb5-1.3.4-33, krb5-devel-1.3.4-33, krb5-devel-1.3.4-33.i386 +10
- Red Hat Enterprise Linux WS version 4 krb5-1.3.4-33, krb5-devel-1.3.4-33, krb5-devel-1.3.4-33.i386 +10
Fixes 1 record
Priority LOW 32
The (1) krshd and (2) v4rcp applications in (a) MIT Kerberos 5 (krb5) up to 1.5, and 1.4.x before 1.4.4, when running on Linux and AIX, and (b) Heimdal 0.7.2 and earlier, do not check return codes for setuid calls, which…
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00528 · Published 2006-08-09 · Fixed CWE-399
