CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-0360

Russ Allbery pam-krb5 before 3.13, when linked against MIT Kerberos, does not properly initialize the Kerberos libraries for setuid use, which allows local users to gain privileges by pointing an environment variable to a modified Kerberos configuration file, and then launching a PAM-based setuid application.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 33.0%

CVSS Severity

CVSS v2 Score 6.2

References

Products affected by CVE-2009-0360

Eyrie » Pam-Krb5 » Version: Any

cpe:2.3:a:eyrie:pam-krb5:*
Eyrie » Pam-Krb5 » Version: 2.0

cpe:2.3:a:eyrie:pam-krb5:2.0
Eyrie » Pam-Krb5 » Version: 2.1

cpe:2.3:a:eyrie:pam-krb5:2.1
Eyrie » Pam-Krb5 » Version: 2.2

cpe:2.3:a:eyrie:pam-krb5:2.2
Eyrie » Pam-Krb5 » Version: 2.3

cpe:2.3:a:eyrie:pam-krb5:2.3
Eyrie » Pam-Krb5 » Version: 2.4

cpe:2.3:a:eyrie:pam-krb5:2.4
Eyrie » Pam-Krb5 » Version: 2.5

cpe:2.3:a:eyrie:pam-krb5:2.5
Eyrie » Pam-Krb5 » Version: 2.6

cpe:2.3:a:eyrie:pam-krb5:2.6
Eyrie » Pam-Krb5 » Version: 3.0

cpe:2.3:a:eyrie:pam-krb5:3.0
Eyrie » Pam-Krb5 » Version: 3.1

cpe:2.3:a:eyrie:pam-krb5:3.1
Eyrie » Pam-Krb5 » Version: 3.10

cpe:2.3:a:eyrie:pam-krb5:3.10
Eyrie » Pam-Krb5 » Version: 3.11

cpe:2.3:a:eyrie:pam-krb5:3.11
Eyrie » Pam-Krb5 » Version: 3.2

cpe:2.3:a:eyrie:pam-krb5:3.2
Eyrie » Pam-Krb5 » Version: 3.3

cpe:2.3:a:eyrie:pam-krb5:3.3
Eyrie » Pam-Krb5 » Version: 3.4

cpe:2.3:a:eyrie:pam-krb5:3.4
Eyrie » Pam-Krb5 » Version: 3.5

cpe:2.3:a:eyrie:pam-krb5:3.5
Eyrie » Pam-Krb5 » Version: 3.6

cpe:2.3:a:eyrie:pam-krb5:3.6
Eyrie » Pam-Krb5 » Version: 3.7

cpe:2.3:a:eyrie:pam-krb5:3.7
Eyrie » Pam-Krb5 » Version: 3.8

cpe:2.3:a:eyrie:pam-krb5:3.8
Eyrie » Pam-Krb5 » Version: 3.9

cpe:2.3:a:eyrie:pam-krb5:3.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-0360

Products

Pricing

Contact Us