ID CVE-2006-0582
Summary Unspecified vulnerability in rshd in Heimdal 0.6.x before 0.6.6 and 0.7.x before 0.7.2, when storing forwarded credentials, allows attackers to overwrite arbitrary files and change file ownership via unknown vectors.
References
Vulnerable Configurations
  • cpe:2.3:a:kth:heimdal:0.6.1:*:*:*:*:*:*:*
    cpe:2.3:a:kth:heimdal:0.6.1:*:*:*:*:*:*:*
  • cpe:2.3:a:kth:heimdal:0.6.2:*:*:*:*:*:*:*
    cpe:2.3:a:kth:heimdal:0.6.2:*:*:*:*:*:*:*
  • cpe:2.3:a:kth:heimdal:0.6.3:*:*:*:*:*:*:*
    cpe:2.3:a:kth:heimdal:0.6.3:*:*:*:*:*:*:*
  • cpe:2.3:a:kth:heimdal:0.6.4:*:*:*:*:*:*:*
    cpe:2.3:a:kth:heimdal:0.6.4:*:*:*:*:*:*:*
  • cpe:2.3:a:kth:heimdal:0.6.5:*:*:*:*:*:*:*
    cpe:2.3:a:kth:heimdal:0.6.5:*:*:*:*:*:*:*
  • cpe:2.3:a:kth:heimdal:0.7.1:*:*:*:*:*:*:*
    cpe:2.3:a:kth:heimdal:0.7.1:*:*:*:*:*:*:*
  • cpe:2.3:a:kth:heimdal:0.7.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:kth:heimdal:0.7.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:kth:heimdal:0.7.1.2:*:*:*:*:*:*:*
    cpe:2.3:a:kth:heimdal:0.7.1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:kth:heimdal:0.7.1.3:*:*:*:*:*:*:*
    cpe:2.3:a:kth:heimdal:0.7.1.3:*:*:*:*:*:*:*
CVSS
Base: 2.1 (as of 19-10-2018 - 15:45)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE PARTIAL NONE
cvss-vector via4 AV:L/AC:L/Au:N/C:N/I:P/A:N
refmap via4
bid 16524
confirm http://www.pdc.kth.se/heimdal/advisory/2006-02-06/
debian DSA-977
gentoo GLSA-200603-14
mlist [heimdal-discuss] 20060206 Heimdal 0.7.2 and 0.6.6
osvdb 22986
sectrack 1015591
secunia
  • 18733
  • 18806
  • 18894
  • 19005
  • 19302
suse SUSE-SA:2006:011
ubuntu
  • USN-247-1
  • USN-253-1
vupen
  • ADV-2006-0456
  • ADV-2006-0628
xf heimdal-rshd-privilege-elevation(24532)
Last major update 19-10-2018 - 15:45
Published 08-02-2006 - 01:02
Last modified 19-10-2018 - 15:45
Back to Top