https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 26 Oct 2026 07:30:18 +0000 https://cve.radiocsirt.org/vuln/bdu:2015-06846 bdu:2015-06846 https://cve.radiocsirt.org/vuln/bdu:2015-06846 https://cve.radiocsirt.org/vuln/certa-2008-avi-484 certa-2008-avi-484 https://cve.radiocsirt.org/vuln/certa-2008-avi-484 https://cve.radiocsirt.org/vuln/euvd-2026-128905 EUVD-2026-128905 https://cve.radiocsirt.org/vuln/euvd-2026-128905 https://cve.radiocsirt.org/vuln/fkie_cve-2008-3825 <p>pam_krb5 2.2.14 in Red Hat Enterprise Linux (RHEL) 5 and earlier, when the existing_ticket option is enabled, uses incorrect privileges when reading a Kerberos credential cache, which allows local users to gain privileges by setting the KRB5CCNAME environment variable to an arbitrary cache filename and running the (1) su or (2) sudo program. NOTE: there may be a related vector involving sshd that has limited relevance.</p> <p>pam_krb5 2.2.14 in Red Hat Enterprise Linux (RHEL) 5 and earlier, when the existing_ticket option is enabled, uses incorrect privileges when reading a Kerberos credential cache, which allows local users to gain privileges by setting the KRB5CCNAME environment variable to an arbitrary cache filename and running the (1) su or (2) sudo program. NOTE: there may be a related vector involving sshd that has limited relevance.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2008-3825 https://cve.radiocsirt.org/vuln/ghsa-7mvj-f88g-7mgj <p>pam_krb5 2.2.14 in Red Hat Enterprise Linux (RHEL) 5 and earlier, when the existing_ticket option is enabled, uses incorrect privileges when reading a Kerberos credential cache, which allows local users to gain privileges by setting the KRB5CCNAME environment variable to an arbitrary cache filename and running the (1) su or (2) sudo program. NOTE: there may be a related vector involving sshd that has limited relevance.</p> <p>pam_krb5 2.2.14 in Red Hat Enterprise Linux (RHEL) 5 and earlier, when the existing_ticket option is enabled, uses incorrect privileges when reading a Kerberos credential cache, which allows local users to gain privileges by setting the KRB5CCNAME environment variable to an arbitrary cache filename and running the (1) su or (2) sudo program. NOTE: there may be a related vector involving sshd that has limited relevance.</p> https://cve.radiocsirt.org/vuln/ghsa-7mvj-f88g-7mgj https://cve.radiocsirt.org/vuln/gsd-2008-3825 gsd-2008-3825 https://cve.radiocsirt.org/vuln/gsd-2008-3825 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10521-1 <p>pam_krb5-2.4.4-6.7 on GA media</p> <p>pam_krb5-2.4.4-6.7 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10521-1 https://cve.radiocsirt.org/vuln/rhsa-2008:0907 <p>pam_krb5 existing_ticket permission flaw</p> <p>pam_krb5 existing_ticket permission flaw</p> https://cve.radiocsirt.org/vuln/rhsa-2008:0907