Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2011-1758

The krb5_save_ccname_done function in providers/krb5/krb5_auth.c in System Security Services Daemon (SSSD) 1.5.x before 1.5.7, when automatic ticket renewal and offline authentication are configured, uses a pathname string as a password, which allows local users to bypass Kerberos authentication by listing the /tmp directory to obtain the pathname.

Published

2011-05-26T18:55:02.237

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 3.7 (LOW)

CVSSv2 Vector

AV:L/AC:H/Au:N/C:P/I:P/A:P

  • Access Vector: LOCAL
  • Access Complexity: HIGH
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

1.9

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-287
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application fedoraproject sssd 1.5.0 Yes
Application fedoraproject sssd 1.5.1 Yes
Application fedoraproject sssd 1.5.2 Yes
Application fedoraproject sssd 1.5.3 Yes
Application fedoraproject sssd 1.5.4 Yes
Application fedoraproject sssd 1.5.5 Yes
Application fedoraproject sssd 1.5.6 Yes
Application fedoraproject sssd 1.5.6.1 Yes
References