CVE:CVE-2008-3825
CNNVD:CNNVD-200810-025
Red Hat Enterprise Linux (RHEL)的pam_krb5, 当existing_ticket选项被激活时,在读取一个Kerberos证书缓冲存储器时使用错误的特权,本地用户可以通过给任意一个缓存文件名设置可变的KRB5CCNAME环境变量并运行su或sudo程序来获得特权。
solution:Upgrade redhat enterprise_linux to a higher version than 5:unknown,and avoid the version 5:unknown; Upgrade redhat enterprise_linux_desktop to a higher version than 5:unknown,and avoid the version 5:unknown