Name: Vulnix
Price: 99 USD

Description

ftpd.c in the GSS-API FTP daemon in MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.1 and earlier does not check the krb5_setegid return value, which allows remote authenticated users to bypass intended group access restrictions, and create, overwrite, delete, or read files, via standard FTP commands, related to missing autoconf tests in a configure script.

Metrics

CVSS 2.0 6.5/10AV:N/AC:L/Au:S/C:P/I:P/A:P

Weakness enumeration

CWE-269

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062681.htmlThird Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062699.htmlThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00009.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00002.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00004.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00005.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00010.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00011.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00014.htmlMailing List, Third Party Advisory
http://secunia.com/advisories/45145Third Party Advisory
http://secunia.com/advisories/45157Third Party Advisory
http://secunia.com/advisories/48101Third Party Advisory
http://securityreason.com/securityalert/8301Third Party Advisory
http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-005.txtPatch, Vendor Advisory
http://www.debian.org/security/2011/dsa-2283Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2011:117Third Party Advisory
http://www.osvdb.org/73617Broken Link
http://www.redhat.com/support/errata/RHSA-2011-0920.htmlThird Party Advisory
http://www.securityfocus.com/archive/1/518733/100/0/threadedThird Party Advisory, VDB Entry
http://www.securityfocus.com/bid/48571Patch, Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=711419Issue Tracking, Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/68398Third Party Advisory, VDB Entry
http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062681.htmlThird Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062699.htmlThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00009.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00002.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00004.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00005.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00010.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00011.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00014.htmlMailing List, Third Party Advisory
http://secunia.com/advisories/45145Third Party Advisory
http://secunia.com/advisories/45157Third Party Advisory
http://secunia.com/advisories/48101Third Party Advisory
http://securityreason.com/securityalert/8301Third Party Advisory
http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-005.txtPatch, Vendor Advisory
http://www.debian.org/security/2011/dsa-2283Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2011:117Third Party Advisory
http://www.osvdb.org/73617Broken Link
http://www.redhat.com/support/errata/RHSA-2011-0920.htmlThird Party Advisory
http://www.securityfocus.com/archive/1/518733/100/0/threadedThird Party Advisory, VDB Entry
http://www.securityfocus.com/bid/48571Patch, Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=711419Issue Tracking, Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/68398Third Party Advisory, VDB Entry

Timeline

Published: Jul 11, 2011
Last modified: Jun 16, 2026
NVD status: Modified

CVE-2011-1526