CVE-2008-5690 - The Kerberos credential renewal feature in Sun Solaris 8, 9, and 10, and OpenSolaris build snv_01 through snv_104, allows local users to cause a denial of service (authentication failure) via unspecified vectors related to incorrect cache file permissions, and lack of credential storage by the store_cred function in pam_krb5

Back Back to CVE browser

LOW

The Kerberos credential renewal feature in Sun Solaris 8, 9, and 10, and OpenSolaris build snv_01 through snv_104, allows local users to cause a denial of service (authentication failure) via unspecified vectors related to incorrect cache file permissions, and lack of credential storage by the store_cred function in pam_krb5

Published Dec 19, 2008

2.1

LOW

CVSS 2.0

EPSS 0.38%

Description

The Kerberos credential renewal feature in Sun Solaris 8, 9, and 10, and OpenSolaris build snv_01 through snv_104, allows local users to cause a denial of service (authentication failure) via unspecified vectors related to incorrect cache file permissions, and lack of credential storage by the store_cred function in pam_krb5.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-255

References (11)

http://secunia.com/advisories/33042
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/33313
third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-21-112908-33-1
x_refsource_CONFIRMPatchVendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-244866-1
vendor-advisoryx_refsource_SUNALERTVendor Advisory
http://support.avaya.com/elmodocs2/security/ASA-2008-515.htm
x_refsource_MISC
http://www.securityfocus.com/bid/32793
vdb-entryx_refsource_BID
http://www.securitytracker.com/id?1021390
vdb-entryx_refsource_SECTRACK
http://www.vupen.com/english/advisories/2008/3428
vdb-entryx_refsource_VUPENVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2008-5661
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/47291
vdb-entryx_refsource_XF
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5792
vdb-entrysignaturex_refsource_OVAL

Link	Providers	Tags
http://secunia.com/advisories/33042		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/33313		third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-21-112908-33-1		x_refsource_CONFIRMPatchVendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-244866-1		vendor-advisoryx_refsource_SUNALERTVendor Advisory
http://support.avaya.com/elmodocs2/security/ASA-2008-515.htm		x_refsource_MISC
http://www.securityfocus.com/bid/32793		vdb-entryx_refsource_BID
http://www.securitytracker.com/id?1021390		vdb-entryx_refsource_SECTRACK
http://www.vupen.com/english/advisories/2008/3428		vdb-entryx_refsource_VUPENVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2008-5661		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/47291		vdb-entryx_refsource_XF
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5792		vdb-entrysignaturex_refsource_OVAL