sudo with Kerberos authentication privilege escalation
Published:		11.06.2007
Source:		BUGTRAQ
SecurityVulns ID:		7791
Type:		local
Level:		5/10
Description:		sudo fails to check granted tickets match to requested service, making it possible to use faked Kerberos server.

Affected:

SUDO : sudo 1.6

Original document		Thor Lancelot , MIT krb5: makes sudo authentication issue MUCH worse. (11.06.2007)
		Thor Lancelot , Sudo: local root compromise with krb5 enabled (11.06.2007)

Discuss:

Read or add your comments to this news (0 comments)