Home > Vulnerability Database > CVE-2011-1526

Mend.io Vulnerability Database

CVE-2011-1526

Date: July 11, 2011

ftpd.c in the GSS-API FTP daemon in MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.1 and earlier does not check the krb5_setegid return value, which allows remote authenticated users to bypass intended group access restrictions, and create, overwrite, delete, or read files, via standard FTP commands, related to missing autoconf tests in a configure script.

Language: C

Severity Score

6.3

Related Resources (25)

Url: http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00011.html

Url: http://www.osvdb.org/73617

Url: https://access.redhat.com/security/cve/CVE-2011-1526

Url: http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062699.html

Url: http://www.securityfocus.com/archive/1/518733/100/0/threaded

Url: http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00004.html

Url: http://www.redhat.com/support/errata/RHSA-2011-0920.html

Url: https://bugzilla.redhat.com/show_bug.cgi?id=711419

Url: http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00010.html

Url: http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00005.html

Url: http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00009.html

Url: http://secunia.com/advisories/45157

Url: http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00002.html

Url: http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062681.html

Url: http://secunia.com/advisories/45145

Url: https://nvd.nist.gov/vuln/detail/CVE-2011-1526

Url: http://securityreason.com/securityalert/8301

Url: http://www.debian.org/security/2011/dsa-2283

Url: http://secunia.com/advisories/48101

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/68398

Url: http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-005.txt

Url: http://www.mandriva.com/security/advisories?name=MDVSA-2011:117

Url: http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00014.html

Url: http://www.securityfocus.com/bid/48571

Url: https://www.mend.io/vulnerability-database/CVE-2011-1526

Severity Score

6.3

Weakness Type (CWE)

Permissions, Privileges, and Access Control

CWE-264

Improper Privilege Management

CWE-269

CVSS v3.1

Base Score:	6.3
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	LOW
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	LOW

CVSS v2

Base Score:	6.5
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	SINGLE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2011-1526

Date: July 11, 2011

Language: C

Severity Score

Related Resources (25)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?