Description
Unspecified vulnerability in rshd in Heimdal 0.6.x before 0.6.6 and 0.7.x before 0.7.2, when storing forwarded credentials, allows attackers to overwrite arbitrary files and change file ownership via unknown vectors.
Affected products
- kth / heimdal0.6.1 – 0.6.1
- kth / heimdal0.6.2 – 0.6.2
- kth / heimdal0.6.3 – 0.6.3
- kth / heimdal0.6.4 – 0.6.4
- kth / heimdal0.6.5 – 0.6.5
- kth / heimdal0.7.1 – 0.7.1
- kth / heimdal0.7.1.1 – 0.7.1.1
- kth / heimdal0.7.1.2 – 0.7.1.2
- kth / heimdal0.7.1.3 – 0.7.1.3
References
- MISChttp://www.securityfocus.com/bid/16524
- VENDOR_ADVISORYhttp://secunia.com/advisories/18894
- MISChttp://www.osvdb.org/22986
- VENDOR_ADVISORYhttp://secunia.com/advisories/19005
- MISChttp://www.pdc.kth.se/heimdal/advisory/2006-02-06/
- MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/24532
- VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2006/0456
- MISChttp://securitytracker.com/id?1015591
- MISChttp://www.gentoo.org/security/en/glsa/glsa-200603-14.xml
- VENDOR_ADVISORYhttp://secunia.com/advisories/18806
- VENDOR_ADVISORYhttp://secunia.com/advisories/18733
- VENDOR_ADVISORYhttp://www.ubuntu.com/usn/usn-253-1
- VENDOR_ADVISORYhttps://usn.ubuntu.com/247-1/
- VENDOR_ADVISORYhttp://www.debian.org/security/2006/dsa-977
- VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2006/0628
- MISChttp://www.securityfocus.com/archive/1/426043/100/0/threaded
- MISChttp://www.stacken.kth.se/lists/heimdal-discuss/2006-02/msg00028.html
- VENDOR_ADVISORYhttp://secunia.com/advisories/19302