NVD

Id
61767  
Name
CVE-2006-3084  
Description
The (1) ftpd and (2) ksu programs in (a) MIT Kerberos 5 (krb5) up to 1.5, and 1.4.x before 1.4.4, and (b) Heimdal 0.7.2 and earlier, do not check return codes for setuid calls, which might allow local users to gain privileges by causing setuid to fail to drop privileges. NOTE: as of 20060808, it is not known whether an exploitable attack scenario exists for these issues.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-08-09  
Modified Date
2011-07-25  
Seq
2006-3084  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
319727 61767 CVE-2006-3084 ftp://ftp.pdc.kth.se/pub/heimdal/src/heimdal-0.7.2-setuid-patch.txt  View
319728 61767 CVE-2006-3084 FEDORA-2007-034  View
319729 61767 CVE-2006-3084 GLSA-200608-21  View
319730 61767 CVE-2006-3084 1016664  View
319731 61767 CVE-2006-3084 http://web.mit.edu/Kerberos/advisories/MITKRB5-SA-2006-001-setuid.txt  View
319732 61767 CVE-2006-3084 DSA-1146  View
319733 61767 CVE-2006-3084 GLSA-200608-15  View
319734 61767 CVE-2006-3084 VU#401660  View
319735 61767 CVE-2006-3084 SUSE-SR:2006:020  View
319736 61767 CVE-2006-3084 http://www.pdc.kth.se/heimdal/advisory/2006-08-08/  View
319737 61767 CVE-2006-3084 20060808 MITKRB-SA-2006-001: multiple local privilege escalation vulnerabilities  View
319738 61767 CVE-2006-3084 20060816 UPDATED: MITKRB5-SA-2006-001: multiple local privilege escalation vulnerabilities  View
319739 61767 CVE-2006-3084 19427  View
319740 61767 CVE-2006-3084 USN-334-1  View
319741 61767 CVE-2006-3084 ADV-2006-3225  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58670 JVNDB-2006-000930 MIT Kerberos5 (krb5) の ftpd および ksu の権限昇格に関する脆弱性 MIT Kerberos5 (krb5) の ftpd および ksu プログラムには setuid() の戻り値の取扱いに問題があるため、権限昇格の脆弱性が存在します。 CVE-2006-3084 19186 CVE-2006-3084 61767 7.2 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000930.html 2006-08-16 2008-11-21 View