CVE

Id
19188  
CVE No.
CVE-2006-3084  
Status
Candidate  
Description
The (1) ftpd and (2) ksu programs in (a) MIT Kerberos 5 (krb5) up to 1.5, and 1.4.x before 1.4.4, and (b) Heimdal 0.7.2 and earlier, do not check return codes for setuid calls, which might allow local users to gain privileges by causing setuid to fail to drop privileges. NOTE: as of 20060808, it is not known whether an exploitable attack scenario exists for these issues.  
Phase
Assigned (20060619)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
171219 19188 CVE-2006-3084 BUGTRAQ:20060808 MITKRB-SA-2006-001: multiple local privilege escalation vulnerabilities  View
171220 19188 CVE-2006-3084 URL:http://www.securityfocus.com/archive/1/archive/1/442599/100/0/threaded  View
171221 19188 CVE-2006-3084 BUGTRAQ:20060816 UPDATED: MITKRB5-SA-2006-001: multiple local privilege escalation vulnerabilities  View
171222 19188 CVE-2006-3084 URL:http://www.securityfocus.com/archive/1/archive/1/443498/100/100/threaded  View
171223 19188 CVE-2006-3084 CONFIRM:http://web.mit.edu/Kerberos/advisories/MITKRB5-SA-2006-001-setuid.txt  View
171224 19188 CVE-2006-3084 CONFIRM:ftp://ftp.pdc.kth.se/pub/heimdal/src/heimdal-0.7.2-setuid-patch.txt  View
171225 19188 CVE-2006-3084 CONFIRM:http://www.pdc.kth.se/heimdal/advisory/2006-08-08/  View
171226 19188 CVE-2006-3084 DEBIAN:DSA-1146  View
171227 19188 CVE-2006-3084 URL:http://www.debian.org/security/2006/dsa-1146  View
171228 19188 CVE-2006-3084 FEDORA:FEDORA-2007-034  View
171229 19188 CVE-2006-3084 URL:http://fedoranews.org/cms/node/2376  View
171230 19188 CVE-2006-3084 GENTOO:GLSA-200608-15  View
171231 19188 CVE-2006-3084 URL:http://www.gentoo.org/security/en/glsa/glsa-200608-15.xml  View
171232 19188 CVE-2006-3084 GENTOO:GLSA-200608-21  View
171233 19188 CVE-2006-3084 URL:http://security.gentoo.org/glsa/glsa-200608-21.xml  View
171234 19188 CVE-2006-3084 SUSE:SUSE-SR:2006:020  View
171235 19188 CVE-2006-3084 URL:http://www.novell.com/linux/security/advisories/2006_20_sr.html  View
171236 19188 CVE-2006-3084 UBUNTU:USN-334-1  View
171237 19188 CVE-2006-3084 URL:http://www.ubuntu.com/usn/usn-334-1  View
171238 19188 CVE-2006-3084 CERT-VN:VU#401660  View
171239 19188 CVE-2006-3084 URL:http://www.kb.cert.org/vuls/id/401660  View
171240 19188 CVE-2006-3084 BID:19427  View
171241 19188 CVE-2006-3084 URL:http://www.securityfocus.com/bid/19427  View
171242 19188 CVE-2006-3084 VUPEN:ADV-2006-3225  View
171243 19188 CVE-2006-3084 URL:http://www.vupen.com/english/advisories/2006/3225  View
171244 19188 CVE-2006-3084 OSVDB:27871  View
171245 19188 CVE-2006-3084 URL:http://www.osvdb.org/27871  View
171246 19188 CVE-2006-3084 OSVDB:27872  View
171247 19188 CVE-2006-3084 URL:http://www.osvdb.org/27872  View
171248 19188 CVE-2006-3084 SECTRACK:1016664  View
171249 19188 CVE-2006-3084 URL:http://securitytracker.com/id?1016664  View
171250 19188 CVE-2006-3084 SECUNIA:21436  View
171251 19188 CVE-2006-3084 URL:http://secunia.com/advisories/21436  View
171252 19188 CVE-2006-3084 SECUNIA:21439  View
171253 19188 CVE-2006-3084 URL:http://secunia.com/advisories/21439  View
171254 19188 CVE-2006-3084 SECUNIA:21461  View
171255 19188 CVE-2006-3084 URL:http://secunia.com/advisories/21461  View
171256 19188 CVE-2006-3084 SECUNIA:21402  View
171257 19188 CVE-2006-3084 URL:http://secunia.com/advisories/21402  View
171258 19188 CVE-2006-3084 SECUNIA:21527  View
171259 19188 CVE-2006-3084 URL:http://secunia.com/advisories/21527  View
171260 19188 CVE-2006-3084 SECUNIA:21613  View
171261 19188 CVE-2006-3084 URL:http://secunia.com/advisories/21613  View
171262 19188 CVE-2006-3084 SECUNIA:23707  View
171263 19188 CVE-2006-3084 URL:http://secunia.com/advisories/23707  View
171264 19188 CVE-2006-3084 SECUNIA:21467  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58156 JVNDB-2006-000352 Microsoft Windows の HrShellOpenWithMonikerDisplayName() 関数におけるバッファオーバーフローの脆弱性 ------------ CVE-2006-3086 19188 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000352.html  View