CVE-2008-3825
published 2008-10-03CVE-2008-3825: pam_krb5 2.2.14 in Red Hat Enterprise Linux (RHEL) 5 and earlier, when the existing_ticket option is enabled, uses incorrect privileges when reading a Kerberos…
PriorityP422medium4.4CVSS 2.0
AVLACMAuNCPIPAP
EPSS
0.35%
27.4th percentile
pam_krb5 2.2.14 in Red Hat Enterprise Linux (RHEL) 5 and earlier, when the existing_ticket option is enabled, uses incorrect privileges when reading a Kerberos credential cache, which allows local users to gain privileges by setting the KRB5CCNAME environment variable to an arbitrary cache filename and running the (1) su or (2) sudo program. NOTE: there may be a related vector involving sshd that has limited relevance.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux_desktop | — | — |
| vmware | esxi | — | — |
| vmware | vmware_tools | — | — |
| vmware | vmware_vcenter_server | — | — |
| vmware | vmware_vsphere | — | — |
| vmware | vmware_workstation | — | — |
CVSS provenance
nvdv2.04.4MEDIUMAV:L/AC:M/Au:N/C:P/I:P/A:P
vendor_redhat4.4MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-7mvj-f88g-7mgj: pam_krb5 2
ghsa_unreviewed·2022-05-02
CVE-2008-3825 [MEDIUM] GHSA-7mvj-f88g-7mgj: pam_krb5 2
pam_krb5 2.2.14 in Red Hat Enterprise Linux (RHEL) 5 and earlier, when the existing_ticket option is enabled, uses incorrect privileges when reading a Kerberos credential cache, which allows local users to gain privileges by setting the KRB5CCNAME environment variable to an arbitrary cache filename and running the (1) su or (2) sudo program. NOTE: there may be a related vector involving sshd that has limited relevance.
VMware
Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX
vendor_vmware·2011-02-10·CVSS 5.0
CVE-2008-0085 [MEDIUM] Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX
VMSA-2011-0003: Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX
Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX VMware Security Advisory VMware Security Advisory Advisory ID: VMware Security Advisory Synopsis: Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX VMware Security Advisory Issue date: VMware Security Advisory Updated on: VMware Security Advisory CVE numbers:
CVEs: CVE-2008-0085, CVE-2008-0086, CVE-2008-0106, CVE-2008-0107, CVE-2008-3825, CVE-2008-5416, CVE-2009-1384, CVE-2009-2693, CVE-2009-2901, CVE-2009-2902, CVE-2009-3548, CVE-2009-3555, CVE-2009-4308, CVE-2010-0003, CVE-2010-0007, CVE-2010-0008, CVE-2010-0082, CVE-2010-0084, CVE-2010-0085,
Red Hat
pam_krb5 existing_ticket permission flaw
vendor_redhat·2008-10-01·CVSS 4.4
CVE-2008-3825 [MEDIUM] pam_krb5 existing_ticket permission flaw
pam_krb5 existing_ticket permission flaw
pam_krb5 2.2.14 in Red Hat Enterprise Linux (RHEL) 5 and earlier, when the existing_ticket option is enabled, uses incorrect privileges when reading a Kerberos credential cache, which allows local users to gain privileges by setting the KRB5CCNAME environment variable to an arbitrary cache filename and running the (1) su or (2) sudo program. NOTE: there may be a related vector involving sshd that has limited relevance.
Statement: This issue did not affect the version of pam_krb5 shipped in Red Hat Enterprise Linux 2.1, 3, or 4.
No detection rules found.
No public exploits indexed.
http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00002.htmlhttp://secunia.com/advisories/32119http://secunia.com/advisories/32135http://secunia.com/advisories/32174http://secunia.com/advisories/43314http://www.mandriva.com/security/advisories?name=MDVSA-2008:209http://www.redhat.com/support/errata/RHSA-2008-0907.htmlhttp://www.securityfocus.com/archive/1/516397/100/0/threadedhttp://www.securityfocus.com/bid/31534http://www.securitytracker.com/id?1020978http://www.vmware.com/security/advisories/VMSA-2011-0003.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=461960https://exchange.xforce.ibmcloud.com/vulnerabilities/45635https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10923https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00150.htmlhttps://www.redhat.com/archives/fedora-package-announce/2008-October/msg00166.htmlhttp://lists.opensuse.org/opensuse-security-announce/2008-12/msg00002.htmlhttp://secunia.com/advisories/32119http://secunia.com/advisories/32135http://secunia.com/advisories/32174http://secunia.com/advisories/43314http://www.mandriva.com/security/advisories?name=MDVSA-2008:209http://www.redhat.com/support/errata/RHSA-2008-0907.htmlhttp://www.securityfocus.com/archive/1/516397/100/0/threadedhttp://www.securityfocus.com/bid/31534http://www.securitytracker.com/id?1020978http://www.vmware.com/security/advisories/VMSA-2011-0003.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=461960https://exchange.xforce.ibmcloud.com/vulnerabilities/45635https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10923https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00150.htmlhttps://www.redhat.com/archives/fedora-package-announce/2008-October/msg00166.html
2008-10-03
Published