Red Hat Security Advisory

RHSA-2008:0907

pam_krb5 security update

Released 2008-10-02 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux (v. 5 server) pam_krb5-2.2.14-1.el5_2.1, pam_krb5-2.2.14-1.el5_2.1.i386, pam_krb5-2.2.14-1.el5_2.1.ia64 +1
Red Hat Enterprise Linux Desktop (v. 5 client) pam_krb5-2.2.14-1.el5_2.1, pam_krb5-2.2.14-1.el5_2.1.i386

Fixes 1 record

TI-2008-03664 CVE-2008-3825 · GHSA-7mvj-f88g-7mgj

pam_krb5 2.2.14 in Red Hat Enterprise Linux (RHEL) 5 and earlier, when the…

LOW 20

pam_krb5 2.2.14 in Red Hat Enterprise Linux (RHEL) 5 and earlier, when the existing_ticket option is enabled, uses incorrect privileges when reading a Kerberos credential cache, which allows local users to gain privilege…

CVSS 2.0MEDIUM 4.4 Local No auth Interaction — EPSS 0.00353 Published 2008-10-03 Fixed CWE-264