QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2006-3084

Back to search

CVE-2006-3084

Published: Aug 9, 2006

Modified: Aug 7, 2024

PUBLISHED

Description

The (1) ftpd and (2) ksu programs in (a) MIT Kerberos 5 (krb5) up to 1.5, and 1.4.x before 1.4.4, and (b) Heimdal 0.7.2 and earlier, do not check return codes for setuid calls, which might allow local users to gain privileges by causing setuid to fail to drop privileges. NOTE: as of 20060808, it is not known whether an exploitable attack scenario exists for these issues.

VendorProductVersions

n/a

n/a

affected
n/a

References

FEDORA-2007-034
vendor-advisory
x_refsource_FEDORA
SUSE-SR:2006:020
vendor-advisory
x_refsource_SUSE
VU#401660
third-party-advisory
x_refsource_CERT-VN
GLSA-200608-21
vendor-advisory
x_refsource_GENTOO
21461
third-party-advisory
x_refsource_SECUNIA
21467
third-party-advisory
x_refsource_SECUNIA
27872
vdb-entry
x_refsource_OSVDB
DSA-1146
vendor-advisory
x_refsource_DEBIAN
21436
third-party-advisory
x_refsource_SECUNIA
ADV-2006-3225
vdb-entry
x_refsource_VUPEN
21527
third-party-advisory
x_refsource_SECUNIA
23707
third-party-advisory
x_refsource_SECUNIA
21439
third-party-advisory
x_refsource_SECUNIA
21402
third-party-advisory
x_refsource_SECUNIA
21613
third-party-advisory
x_refsource_SECUNIA
1016664
vdb-entry
x_refsource_SECTRACK
GLSA-200608-15
vendor-advisory
x_refsource_GENTOO
27871
vdb-entry
x_refsource_OSVDB
USN-334-1
vendor-advisory
x_refsource_UBUNTU
19427
vdb-entry
x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now