CVE-2002-0754

Published: Aug 12, 2002Modified: Apr 16, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

Kerberos 5 su (k5su) in FreeBSD 4.4 and earlier relies on the getlogin system call to determine if the user running k5su is root, which could allow a root-initiated process to regain its privileges after it has dropped them.

Affected (13)

Products: Freebsd: Heimdal, Freebsd · Kth: Heimdal

2 products

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Freebsd Heimdal	Version 0.4e
Kth Heimdal	Version 0.4e

Configuration B

11 vulnerable

Vulnerable Software	Affected Versions
Freebsd Freebsd	Version 4.0
Freebsd Freebsd	Version 4.1.1
Freebsd Freebsd	Version 4.1.1 release
Freebsd Freebsd	Version 4.1.1 stable
Freebsd Freebsd	Version 4.1
Freebsd Freebsd	Version 4.2
Freebsd Freebsd	Version 4.2 stable
Freebsd Freebsd	Version 4.3
Freebsd Freebsd	Version 4.3 release
Freebsd Freebsd	Version 4.3 stable
Freebsd Freebsd	Version 4.4