CVE-2002-0754 | BDVDB-2026-5252 Detail

Description#

Kerberos 5 su (k5su) in FreeBSD 4.4 and earlier relies on the getlogin system call to determine if the user running k5su is root, which could allow a root-initiated process to regain its privileges after it has dropped them.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/3919
http://www.iss.net/security_center/static/7956.php

Exploit#

No public exploit known

History#

Version 12003-04-02Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.