----------------------------------------------------------------------

Do you need accurate and reliable IDS / IPS / AV detection rules?

Get in-depth vulnerability details:
http://secunia.com/binary_analysis/sample_analysis/

----------------------------------------------------------------------

TITLE:
pam_krb5 Credential Cache "exisiting_ticket" Security Bypass

SECUNIA ADVISORY ID:
SA32119

VERIFY ADVISORY:
http://secunia.com/advisories/32119/

CRITICAL:
Less critical

IMPACT:
Security Bypass

WHERE:
Local system

SOFTWARE:
pam_krb5 2.x
http://secunia.com/advisories/product/20029/

DESCRIPTION:
A security issue has been reported in pam_krb5, which can be
exploited by malicious, local users to bypass certain security
restrictions.

The security issue is caused due to pam_krb5 not correctly
restricting users from reusing the existing credentials of another
user. This can be exploited to e.g. switch into another user's
account by setting the "KRB5CCNAME" variable to point to the
credentials cache of the target user.

Successful exploitation requires that the "existing_ticket" option is
enabled.

The security issue is reported in versions 2.2.0 to 2.2.25, 2.3.0,
and 2.3.1. Other versions may also be affected.

SOLUTION:
Update to version 2.3.2-1.

PROVIDED AND/OR DISCOVERED BY:
Stéphane Bertin

ORIGINAL ADVISORY:
RHSA-2008-0907:
https://rhn.redhat.com/errata/RHSA-2008-0907.html

Red Hat Bug #461960:
https://bugzilla.redhat.com/show_bug.cgi?id=461960

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------