high7.2
CVE-2002-0754
Kerberos 5 su (k5su) in FreeBSD 4.4 and earlier relies on the getlogin system call to determine if the user running k5su is root, which could allow a root-init…
Impact
Kerberos 5 su (k5su) in FreeBSD 4.4 and earlier relies on the getlogin system call to determine if the user running k5su is root, which could allow a root-initiated process to regain its privileges after it has dropped them.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Freebsd | Heimdal | Version 0.4e |
| Kth | Heimdal | Version 0.4e |
| Freebsd | Freebsd | Versions 4.0, 4.1, 4.1.1, 4.2, 4.3, 4.4 |