NVD

Id
3687  
Name
CVE-2008-3825  
Description
pam_krb5 2.2.14 in Red Hat Enterprise Linux (RHEL) 5 and earlier, when the existing_ticket option is enabled, uses incorrect privileges when reading a Kerberos credential cache, which allows local users to gain privileges by setting the KRB5CCNAME environment variable to an arbitrary cache filename and running the (1) su or (2) sudo program. NOTE: there may be a related vector involving sshd that has limited relevance.  
Reject
 
CVSS Version
2  
CVSS Score
4.4  
Severity
Medium  
CVSS Base Score
4.4  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-10-03  
Modified Date
2011-02-17  
Seq
2008-3825  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
23272 3687 CVE-2008-3825 SUSE-SR:2008:027  View
23273 3687 CVE-2008-3825 oval:org.mitre.oval:def:10923  View
23274 3687 CVE-2008-3825 MDVSA-2008:209  View
23275 3687 CVE-2008-3825 RHSA-2008:0907  View
23276 3687 CVE-2008-3825 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX  View
23277 3687 CVE-2008-3825 31534  View
23278 3687 CVE-2008-3825 1020978  View
23279 3687 CVE-2008-3825 http://www.vmware.com/security/advisories/VMSA-2011-0003.html  View
23280 3687 CVE-2008-3825 pamkrb5-existingticket-privilege-escalation(45635)  View
23281 3687 CVE-2008-3825 https://bugzilla.redhat.com/show_bug.cgi?id=461960  View
23282 3687 CVE-2008-3825 FEDORA-2008-8605  View
23283 3687 CVE-2008-3825 FEDORA-2008-8618  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46489 JVNDB-2008-001799 Red Hat Enterprise Linux の pam_krb5 における権限昇格の脆弱性 Red Hat Enterprise Linux の pam_krb5 には、existing_ticket オプションを使用している場合に Kerberos 証明書のキャッシュを読み込むことに不正な権限が使われる脆弱性が存在します。 CVE-2008-3825 33938 CVE-2008-3825 3687 4.4 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001799.html 2008-10-02 2011-02-28 View