Description
The Kerberos credential renewal feature in Sun Solaris 8, 9, and 10, and OpenSolaris build snv_01 through snv_104, allows local users to cause a denial of service (authentication failure) via unspecified vectors related to incorrect cache file permissions, and lack of credential storage by the store_cred function in pam_krb5.
References
- ADV-2008-3428 vdb-entry
- 33042 third-party-advisory
- 244866 vendor-advisory
- 32793 vdb-entry
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-112908-33-1
- oval:org.mitre.oval:def:5792 vdb-entry signature
- 1021390 vdb-entry
- solaris-kerberos-credential-dos(47291) vdb-entry
- http://support.avaya.com/elmodocs2/security/ASA-2008-515.htm
- 33313 third-party-advisory