Red Hat Security Advisory

RHSA-2011:0920

krb5-appl security update

Released 2011-07-05 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 6) krb5-appl-1.0.1-2.el6_1.1, krb5-appl-clients-1.0.1-2.el6_1.1, krb5-appl-servers-1.0.1-2.el6_1.1

Fixes 1 record

TI-2011-01345 CVE-2011-1526 · GHSA-qc9v-p4hp-c5fh

ftpd.c in the GSS-API FTP daemon in MIT Kerberos Version 5 Applications (aka krb5-appl)…

LOW 36

ftpd.c in the GSS-API FTP daemon in MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.1 and earlier does not check the krb5_setegid return value, which allows remote authenticated users to bypass intended group acc…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.03938 Published 2011-07-11 Partial fix CWE-269