Description
Kerberos 5 su (k5su) in FreeBSD 4.5 and earlier does not verify that a user is a member of the wheel group before granting superuser privileges, which could allow unauthorized users to execute commands as root.
References
- 4777 vdb-entry
- freebsd-k5su-gain-privileges(9125) vdb-entry
- 4893 vdb-entry