CVE-2006-3083: High severity heimdal heimdal vulnerability
The (1) krshd and (2) v4rcp applications in (a) MIT Kerberos 5 (krb5) up to 1.5, and 1.4.x before 1.4.4, when running on Linux and AIX, and (b) Heimdal 0.7.2 and earlier, do not check return codes for setuid calls, which allows local users to gain privileges by causing setuid to fail to drop privileges using attacks such as resource exhaustion.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-3083?
CVE-2006-3083 is considered a high severity vulnerability due to its potential to allow local users to gain elevated privileges.
How do I fix CVE-2006-3083?
To fix CVE-2006-3083, upgrade to the latest versions of MIT Kerberos 5 (1.4.4 and later) or Heimdal (1.0 and later), where this issue has been addressed.
Which applications are affected by CVE-2006-3083?
CVE-2006-3083 affects the krshd and v4rcp applications in MIT Kerberos 5 versions up to 1.5 and Heimdal versions up to 0.7.2.
Can CVE-2006-3083 be exploited remotely?
CVE-2006-3083 cannot be exploited remotely as it requires local access to the system.
What are the implications of CVE-2006-3083?
The implications of CVE-2006-3083 include unauthorized privilege escalation for local users, which can lead to significant system vulnerabilities.