CVE-2011-1526: Medium severity mit kerberos 5 application vulnerability

Published Jun 7, 2011
·
Updated

ftpd.c in the GSS-API FTP daemon in MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.1 and earlier does not check the krb5setegid return value, which allows remote authenticated users to bypass intended group access restrictions, and create, overwrite, delete, or read files, via standard FTP commands, related to missing autoconf tests in a configure script.

Other sources

It was found that the kerberized FTP server did not properly check for the failure to set its effective group identifier (GID). A remote, authenticated FTP user could use this flaw to gain unauthorized read or write access to files whose group owner was the initial effective GID of the FTP daemon process.

References: [1] http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-005.txt (not public yet) [2] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1526

Upstream patch: [3] http://web.mit.edu/kerberos/advisories/2011-005-patch.txt

Acknowledgements:

Red Hat would like to thank the MIT Kerberos project for reporting this issue. Upstream acknowledges Tim Zingelman as the original reporter.

Red Hat

Affected Software

16 affected components
MIT krb5-appl<1.0.1
Debian Debian Linux=5.0
Debian Debian Linux=6.0
Fedoraproject Fedora=15
Fedoraproject Fedora=14
SUSE Linux Enterprise Desktop=11-sp1
openSUSE openSUSE=11.4
openSUSE openSUSE=11.3
SUSE Linux Enterprise Server=10-sp2
SUSE Linux Enterprise Software Development Kit=10-sp4
SUSE Linux Enterprise Server=11-sp1
SUSE Linux Enterprise Server=10-sp3
SUSE Linux Enterprise Desktop=10-sp4
SUSE Linux Enterprise Server=10-sp4
SUSE Linux Enterprise Software Development Kit=11-sp1
SUSE Linux Enterprise Server Vmware=11-sp1

Event History

Jun 7, 2011
Data Sourced
01:06 PM
DescriptionSeverityAffected Software
Jul 11, 2011
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2011-1526?

CVE-2011-1526 has a medium severity rating due to its impact on file access and group access restrictions.

2

How do I fix CVE-2011-1526?

To fix CVE-2011-1526, upgrade to MIT Kerberos Version 5 Applications 1.0.2 or later.

3

Who is affected by CVE-2011-1526?

CVE-2011-1526 affects users of MIT Kerberos Version 5 Applications 1.0.1 and earlier, as well as specific versions of Debian and Fedora distributions mentioned in the vulnerability report.

4

What does CVE-2011-1526 allow remote authenticated users to do?

CVE-2011-1526 allows remote authenticated users to bypass intended group access restrictions, enabling them to create, overwrite, delete, or read files.

5

Is there a patch available for CVE-2011-1526?

Yes, a patch for CVE-2011-1526 is available and can be applied by updating to the recommended software version.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203