CVE-2011-1526 Privilege escalation in n/a
Authenticated users can bypass group restrictions to read, write, or delete files due to unchecked return values in the Kerberos FTP daemon.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2011-1526?
CVE-2011-1526 is a medium-severity vulnerability in Debian Debian Linux, published on 11 Jul 2011. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
ftpd.c in the GSS-API FTP daemon in MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.1 and earlier does not check the krb5_setegid return value, which allows remote authenticated users to bypass intended group access restrictions, and create, overwrite, delete, or read files, via standard FTP commands, related to missing autoconf tests in a configure script.
Weakness: CWE-269
Which versions are affected by CVE-2011-1526?
It affects 7 products.
Linux distribution packages (20)
krb5 Red Hat:enterprise_linux:5::client | All versions | 0:1.6.1-70.el5 |
krb5-debuginfo Red Hat:enterprise_linux:5::client | All versions | 0:1.6.1-70.el5 |
krb5-libs Red Hat:enterprise_linux:5::client | All versions | 0:1.6.1-70.el5 |
krb5-workstation Red Hat:enterprise_linux:5::client | All versions | 0:1.6.1-70.el5 |
krb5 Red Hat:enterprise_linux:5::client_workstation | All versions | 0:1.6.1-70.el5 |
krb5-debuginfo Red Hat:enterprise_linux:5::client_workstation | All versions | 0:1.6.1-70.el5 |
krb5-devel Red Hat:enterprise_linux:5::client_workstation | All versions | 0:1.6.1-70.el5 |
krb5-server Red Hat:enterprise_linux:5::client_workstation | All versions | 0:1.6.1-70.el5 |
krb5-server-ldap Red Hat:enterprise_linux:5::client_workstation | All versions | 0:1.6.1-70.el5 |
krb5 Red Hat:enterprise_linux:5::server | All versions | 0:1.6.1-70.el5 |
krb5-debuginfo Red Hat:enterprise_linux:5::server | All versions | 0:1.6.1-70.el5 |
krb5-devel Red Hat:enterprise_linux:5::server | All versions | 0:1.6.1-70.el5 |
krb5-libs Red Hat:enterprise_linux:5::server | All versions | 0:1.6.1-70.el5 |
krb5-server Red Hat:enterprise_linux:5::server | All versions | 0:1.6.1-70.el5 |
krb5-server-ldap Red Hat:enterprise_linux:5::server | All versions | 0:1.6.1-70.el5 |
krb5-workstation Red Hat:enterprise_linux:5::server | All versions | 0:1.6.1-70.el5 |
krb5-appl Red Hat:enterprise_linux:6::server | All versions | 0:1.0.1-2.el6_1.1 |
krb5-appl-clients Red Hat:enterprise_linux:6::server | All versions | 0:1.0.1-2.el6_1.1 |
krb5-appl-debuginfo Red Hat:enterprise_linux:6::server | All versions | 0:1.0.1-2.el6_1.1 |
krb5-appl-servers Red Hat:enterprise_linux:6::server | All versions | 0:1.0.1-2.el6_1.1 |
Products include Debian Debian Linux, Fedoraproject Fedora, Mit Krb5-Appl, Opensuse Opensuse, Suse Linux Enterprise Desktop, Suse Linux Enterprise Server and 1 more.
How do I fix CVE-2011-1526?
Apply the vendor's patch.
Is CVE-2011-1526 being exploited?
There is no known exploitation of CVE-2011-1526 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as DSA-2283-1, GHSA-qc9v-p4hp-c5fh, RHSA-2011:0920, RHSA-2012:0306.