CVE-2011-1526: debian debian_linux Improper Privilege Management
Vulnerability summary
CVE-2011-1526 is a medium (CVSS 6.5) Improper Privilege Management vulnerability in debian debian_linux. EPSS estimates a 3.94% chance of exploitation in the next 30 days, higher than 90.2% of scored vulnerabilities.
Timeline
- 11-07-2011PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
ftpd.c in the GSS-API FTP daemon in MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.1 and earlier does not check the krb5_setegid return value, which allows remote authenticated users to bypass intended group access restrictions, and create, overwrite, delete, or read files, via standard FTP commands, related to missing autoconf tests in a configure script.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
3.94%
Chance of exploitation in the next 30 days
Percentile
90%
Versus all other CVEs
30-day change
0.00 pp
From 3.94% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Redhat11 products
- krb5< 0:1.6.1-70.el5
- krb5-appl< 0:1.0.1-2.el6_1.1
- krb5-appl-clients< 0:1.0.1-2.el6_1.1
- krb5-appl-debuginfo< 0:1.0.1-2.el6_1.1
- krb5-appl-servers< 0:1.0.1-2.el6_1.1
Suse3 products
- linux_enterprise_desktop10:sp4 | 11:sp1
- linux_enterprise_server10:sp2 | 10:sp3 | 10:sp4 | 11:sp1
- linux_enterprise_software_development_kit10:sp4 | 11:sp1
Debian2 products
- krb5-appl< 1:1.0.1-1.1
- debian_linuxEOL5.0 | 6.0
Fedoraproject1 product
- fedoraEOL14 | 15
Mit1 product
- krb5-appl< 1.0.1
Opensuse1 product
- opensuseEOL11.3 | 11.4
6 vendors · 19 products
References
35 links- lists.opensuse.org/opensuse-security-announce/2012-01/msg00010.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2012-01/msg00004.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- www.redhat.com/support/errata/RHSA-2011-0920.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
- web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-005.txtX Refsource CONFIRMPatchVendor AdvisoryARTICLE
- lists.opensuse.org/opensuse-security-announce/2011-10/msg00009.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2012-01/msg00005.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2012-01/msg00011.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
Show all 35 references
- lists.opensuse.org/opensuse-security-announce/2012-01/msg00014.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- bugzilla.redhat.com/show_bug.cgi?id=711419X Refsource CONFIRMIssue TrackingThird Party AdvisoryREPORT
- lists.opensuse.org/opensuse-security-announce/2012-01/msg00002.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- www.mandriva.com/security/advisories?name=MDVSA-2011:117Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
- lists.fedoraproject.org/pipermail/package-announce/2011-July/062699.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
- www.securityfocus.com/archive/1/518733/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
- lists.fedoraproject.org/pipermail/package-announce/2011-July/062681.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
