Red Hat Security AdvisoryRHSA-2012:0306
krb5 security and bug fix update
Released 2012-02-21 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) krb5-1.6.1-70.el5, krb5-devel-1.6.1-70.el5, krb5-devel-1.6.1-70.el5.i386 +18
- Red Hat Enterprise Linux Desktop (v. 5 client) krb5-1.6.1-70.el5, krb5-libs-1.6.1-70.el5, krb5-libs-1.6.1-70.el5.i386 +2
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) krb5-1.6.1-70.el5, krb5-devel-1.6.1-70.el5, krb5-devel-1.6.1-70.el5.i386 +4
Fixes 1 record
Priority LOW 36
ftpd.c in the GSS-API FTP daemon in MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.1 and earlier does not check the krb5_setegid return value, which allows remote authenticated users to bypass intended group acc…
CVSS 2.0MEDIUM 6.5· Network · Low privileges · Interaction — · EPSS 0.03938 · Published 2011-07-11 · Partial fix CWE-269
