Debian/libpam-krb5: unknown
Russ Allbery pam-krb5 before 3.13, as used by libpam-heimdal, su in Solaris 10, and other software, does not properly handle calls to pam_setcred when running setuid, which allows local users to overw
Action: Upgrade libpam-krb5 to 3.13-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.13-2 | - |
Fixed versions
| 3.13-2 |
Sources
- osv: DEBIAN-CVE-2009-0361#Debian:14/libpam-krb5
- https://security-tracker.debian.org/tracker/CVE-2009-0361
published · modified · JSON