Total vulnerabilities in the database
Kerberos 5 su (k5su) in FreeBSD 4.4 and earlier relies on the getlogin system call to determine if the user running k5su is root, which could allow a root-initiated process to regain its privileges after it has dropped them.
| Software | From | Fixed in |
|---|---|---|
| freebsd / heimdal | 0.4e | 0.4e.x |
| kth / heimdal | 0.4e | 0.4e.x |
| freebsd / freebsd | 4.1.1-stable | 4.1.1-stable.x |
| freebsd / freebsd | 4.1.1-release | 4.1.1-release.x |
| freebsd / freebsd | 4.3-stable | 4.3-stable.x |
| freebsd / freebsd | 4.3-release | 4.3-release.x |
| freebsd / freebsd | 4.2-stable | 4.2-stable.x |
| freebsd / freebsd | 4.1 | 4.1.x |
| freebsd / freebsd | 4.4 | 4.4.x |
| freebsd / freebsd | 4.2 | 4.2.x |
| freebsd / freebsd | 4.0 | 4.0.x |
| freebsd / freebsd | 4.1.1 | 4.1.1.x |
| freebsd / freebsd | 4.3 | 4.3.x |