Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Kerberos 5 su (k5su) in FreeBSD 4.4 and earlier relies on the getlogin system call to determine if the user running k5su is root, which could allow a root-initiated process to regain its privileges after it has dropped them.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Kerberos 5 su权限提升漏洞
Vulnerability Description
k5su是一个兼容Kerberos 5的su程序。与su一样，它允许已认证用户`切换用户'以获得其他权限。getlogin和setlogin系统调用是用来管理与登录会话有关的用户名的。 某些版本的k5su存在设计问题，在某些情况下，本地攻击者可能利用这个漏洞提升自己在系统中的权限。 FreeBSD 4.5-RELEASE之前版本自带的k5su命令和heimdal-0.4e_2之前版本的heimdal 移植自带的su命令使用getlogin系统调用来判断当前已登录的用户是否有`root'权限。有些情况下，由
CVSS Information
N/A
Vulnerability Type
N/A