CVE-2011-2709

libgssapi and libgssglue before 0.4 do not properly check privileges, which allows local users to load untrusted configuration files and execute arbitrary code…

published June 21, 2012

CVSS
—
EPSS
0%
Percentile
37.2
In the wild
Unconfirmed
What it is

libgssapi and libgssglue before 0.4 do not properly check privileges, which allows local users to load untrusted configuration files and execute arbitrary code via the GSSAPI_MECH_CONF environment variable, as demonstrated using mount.nfs.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00440 · 37.2th percentile
Published
2012-06-21T15:00Z
EPSS history
Timeline
  • 21 JUN 15:00Z
    libgssapi and libgssglue before 0.4 do not properly check privileges, which allows local users to load untrusted configuration files and execute arbitrary code…
    cvelistv5