Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2011-1758

Date: May 26, 2011

The krb5_save_ccname_done function in providers/krb5/krb5_auth.c in System Security Services Daemon (SSSD) 1.5.x before 1.5.7, when automatic ticket renewal and offline authentication are configured, uses a pathname string as a password, which allows local users to bypass Kerberos authentication by listing the /tmp directory to obtain the pathname.

Language: C

Severity Score

Related Resources (11)

http://lists.fedoraproject.org/pipermail/package-announce/2011-May/059619.html
https://fedorahosted.org/sssd/ticket/856
http://lists.fedoraproject.org/pipermail/package-announce/2011-May/059532.html
http://openwall.com/lists/oss-security/2011/04/29/4
https://bugzilla.redhat.com/show_bug.cgi?id=700891
http://git.fedorahosted.org/git/?p=sssd.git%3Ba=commit%3Bh=fffdae81651b460f3d2c119c56d5caa09b4de42a
https://fedorahosted.org/pipermail/sssd-devel/2011-April/006138.html
https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.7
https://nvd.nist.gov/vuln/detail/CVE-2011-1758
https://bugzilla.redhat.com/show_bug.cgi?id=700867
https://www.mend.io/vulnerability-database/CVE-2011-1758

Severity Score

Weakness Type (CWE)

Authentication Issues

CWE-287

CVSS v3.1

Base Score:
Attack Vector (AV): LOCAL
Attack Complexity (AC): HIGH
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): LOW
Integrity (I): LOW
Availability (A): LOW

CVSS v2

Base Score:
Access Vector (AV): LOCAL
Access Complexity (AC): HIGH
Authentication (AU): NONE
Confidentiality (C): PARTIAL
Integrity (I): PARTIAL
Availability (A): PARTIAL
Additional information:

Do you need more information?

Contact Us