{"api_version":"1","generated_at":"2026-07-23T09:39:59+00:00","cve":"CVE-2006-3083","urls":{"html":"https://cve.report/CVE-2006-3083","api":"https://cve.report/api/cve/CVE-2006-3083.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2006-3083","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-3083"},"summary":{"title":"CVE-2006-3083","description":"The (1) krshd and (2) v4rcp applications in (a) MIT Kerberos 5 (krb5) up to 1.5, and 1.4.x before 1.4.4, when running on Linux and AIX, and (b) Heimdal 0.7.2 and earlier, do not check return codes for setuid calls, which allows local users to gain privileges by causing setuid to fail to drop privileges using attacks such as resource exhaustion.","state":"PUBLIC","assigner":"cve@mitre.org","published_at":"2006-08-09 10:04:00","updated_at":"2020-01-21 15:45:00"},"problem_types":["CWE-399"],"metrics":[],"references":[{"url":"http://securitytracker.com/id?1016664","name":"1016664","refsource":"SECTRACK","tags":[],"title":"SecurityTracker.com Archives - Kerberos Application Flaws in Evaluating setuid/seteuid Calls May Let Local Users Gain Elevated Privileges","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.novell.com/linux/security/advisories/2006_20_sr.html","name":"SUSE-SR:2006:020","refsource":"SUSE","tags":[],"title":"Security Announcement","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://www.kb.cert.org/vuls/id/580124","name":"VU#580124","refsource":"CERT-VN","tags":["Patch","US Government Resource"],"title":"US-CERT Vulnerability Note VU#580124","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200608-15.xml","name":"GLSA-200608-15","refsource":"GENTOO","tags":[],"title":"Gentoo Linux Documentation\n--\n  MIT Kerberos 5: Multiple local privilege escalation vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.pdc.kth.se/heimdal/advisory/2006-08-08/","name":"http://www.pdc.kth.se/heimdal/advisory/2006-08-08/","refsource":"CONFIRM","tags":[],"title":"2006-08-08: multiple local privilege escalation vulnerabilities","mime":"text/xml","httpstatus":"404","archivestatus":"200"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:139","name":"MDKSA-2006:139","refsource":"MANDRIVA","tags":[],"title":"Advisories - Mandriva Linux","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21467","name":"21467","refsource":"SECUNIA","tags":["Vendor Advisory"],"title":"SUSE Update for Multiple Packages - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21527","name":"21527","refsource":"SECUNIA","tags":["Vendor Advisory"],"title":"Ubuntu update for krb5 - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.ubuntu.com/usn/usn-334-1","name":"USN-334-1","refsource":"UBUNTU","tags":[],"title":"usn/usn-334-1 - Ubuntu: Linux for human beings","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/442599/100/0/threaded","name":"20060808 MITKRB-SA-2006-001: multiple local privilege escalation vulnerabilities","refsource":"BUGTRAQ","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://security.gentoo.org/glsa/glsa-200608-21.xml","name":"GLSA-200608-21","refsource":"GENTOO","tags":[],"title":"Gentoo Linux Documentation\n--\n  Heimdal: Multiple local privilege escalation vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21436","name":"21436","refsource":"SECUNIA","tags":["Vendor Advisory"],"title":"Secunia - Advisories - Heimdal setuid Security Issue","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21613","name":"21613","refsource":"SECUNIA","tags":["Vendor Advisory"],"title":"Gentoo update for heimdal - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.osvdb.org/27870","name":"27870","refsource":"OSVDB","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://secunia.com/advisories/21439","name":"21439","refsource":"SECUNIA","tags":["Vendor Advisory"],"title":"Secunia - Advisories - Debian update for krb5","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.novell.com/linux/security/advisories/2006_22_sr.html","name":"SUSE-SR:2006:022","refsource":"SUSE","tags":[],"title":"Security Announcement","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://secunia.com/advisories/22291","name":"22291","refsource":"SECUNIA","tags":["Vendor Advisory"],"title":"Avaya Products Kerberos V5 setuid Security Issue - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.osvdb.org/27869","name":"27869","refsource":"OSVDB","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.securityfocus.com/archive/1/443498/100/100/threaded","name":"20060816 UPDATED: MITKRB5-SA-2006-001: multiple local privilege escalation vulnerabilities","refsource":"BUGTRAQ","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9515","name":"oval:org.mitre.oval:def:9515","refsource":"OVAL","tags":[],"title":"Repository  /  Oval Repository","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://web.mit.edu/Kerberos/advisories/MITKRB5-SA-2006-001-setuid.txt","name":"http://web.mit.edu/Kerberos/advisories/MITKRB5-SA-2006-001-setuid.txt","refsource":"CONFIRM","tags":["Patch","Vendor Advisory"],"title":"","mime":"text/plain","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/19427","name":"19427","refsource":"BID","tags":[],"title":"MIT Kerberos 5 Multiple Local Privilege Escalation Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0612.html","name":"RHSA-2006:0612","refsource":"REDHAT","tags":["Patch","Vendor Advisory"],"title":"rhn.redhat.com | Red Hat Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"ftp://ftp.pdc.kth.se/pub/heimdal/src/heimdal-0.7.2-setuid-patch.txt","name":"ftp://ftp.pdc.kth.se/pub/heimdal/src/heimdal-0.7.2-setuid-patch.txt","refsource":"CONFIRM","tags":[],"title":"","mime":"text/x-diff","httpstatus":"-1","archivestatus":"200"},{"url":"http://secunia.com/advisories/21461","name":"21461","refsource":"SECUNIA","tags":["Vendor Advisory"],"title":"Gentoo update for mit-krb5 - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21456","name":"21456","refsource":"SECUNIA","tags":["Vendor Advisory"],"title":"Secunia - Advisories - rPath update for krb5","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21402","name":"21402","refsource":"SECUNIA","tags":["Vendor Advisory"],"title":"Kerberos V5 setuid Security Issue - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2006/3225","name":"ADV-2006-3225","refsource":"VUPEN","tags":["Vendor Advisory"],"title":"Webmail - OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-211.htm","name":"http://support.avaya.com/elmodocs2/security/ASA-2006-211.htm","refsource":"CONFIRM","tags":[],"title":"ASA-2006-211 (RHSA-2006-0612)","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21847","name":"21847","refsource":"SECUNIA","tags":["Vendor Advisory"],"title":"SUSE Update for Multiple Packages - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.debian.org/security/2006/dsa-1146","name":"DSA-1146","refsource":"DEBIAN","tags":[],"title":"Debian -- Security Information -- DSA-1146-1 krb5","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21441","name":"21441","refsource":"SECUNIA","tags":["Vendor Advisory"],"title":"Secunia - Advisories - Mandriva update for krb5","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21423","name":"21423","refsource":"SECUNIA","tags":["Vendor Advisory"],"title":"Secunia - Advisories - Red Hat update for krb5","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-3083","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-3083","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2006","cve_id":"3083","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"heimdal","cpe5":"heimdal","cpe6":"0.7.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3083","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"heimdal","cpe5":"heimdal","cpe6":"0.7.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3083","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mit","cpe5":"kerberos_5","cpe6":"1.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3083","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mit","cpe5":"kerberos_5","cpe6":"1.4.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3083","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mit","cpe5":"kerberos_5","cpe6":"1.4.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3083","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mit","cpe5":"kerberos_5","cpe6":"1.4.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3083","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mit","cpe5":"kerberos_5","cpe6":"1.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3083","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mit","cpe5":"kerberos_5","cpe6":"1.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3083","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mit","cpe5":"kerberos_5","cpe6":"1.4.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3083","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mit","cpe5":"kerberos_5","cpe6":"1.4.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3083","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mit","cpe5":"kerberos_5","cpe6":"1.4.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3083","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mit","cpe5":"kerberos_5","cpe6":"1.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[{"cvename":"CVE-2006-3083","organization":"Red Hat","lastmodified":"2007-03-14","contributor":"Mark J Cox","statementText":"Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.","cve_year":"2006","cve_id":"3083","crc32":"e4ada83e"}],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2006-3083","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The (1) krshd and (2) v4rcp applications in (a) MIT Kerberos 5 (krb5) up to 1.5, and 1.4.x before 1.4.4, when running on Linux and AIX, and (b) Heimdal 0.7.2 and earlier, do not check return codes for setuid calls, which allows local users to gain privileges by causing setuid to fail to drop privileges using attacks such as resource exhaustion."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"MDKSA-2006:139","refsource":"MANDRIVA","url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:139"},{"name":"VU#580124","refsource":"CERT-VN","url":"http://www.kb.cert.org/vuls/id/580124"},{"name":"http://support.avaya.com/elmodocs2/security/ASA-2006-211.htm","refsource":"CONFIRM","url":"http://support.avaya.com/elmodocs2/security/ASA-2006-211.htm"},{"name":"http://web.mit.edu/Kerberos/advisories/MITKRB5-SA-2006-001-setuid.txt","refsource":"CONFIRM","url":"http://web.mit.edu/Kerberos/advisories/MITKRB5-SA-2006-001-setuid.txt"},{"name":"27869","refsource":"OSVDB","url":"http://www.osvdb.org/27869"},{"name":"21847","refsource":"SECUNIA","url":"http://secunia.com/advisories/21847"},{"name":"SUSE-SR:2006:020","refsource":"SUSE","url":"http://www.novell.com/linux/security/advisories/2006_20_sr.html"},{"name":"GLSA-200608-21","refsource":"GENTOO","url":"http://security.gentoo.org/glsa/glsa-200608-21.xml"},{"name":"21461","refsource":"SECUNIA","url":"http://secunia.com/advisories/21461"},{"name":"21467","refsource":"SECUNIA","url":"http://secunia.com/advisories/21467"},{"name":"ftp://ftp.pdc.kth.se/pub/heimdal/src/heimdal-0.7.2-setuid-patch.txt","refsource":"CONFIRM","url":"ftp://ftp.pdc.kth.se/pub/heimdal/src/heimdal-0.7.2-setuid-patch.txt"},{"name":"DSA-1146","refsource":"DEBIAN","url":"http://www.debian.org/security/2006/dsa-1146"},{"name":"RHSA-2006:0612","refsource":"REDHAT","url":"http://www.redhat.com/support/errata/RHSA-2006-0612.html"},{"name":"21436","refsource":"SECUNIA","url":"http://secunia.com/advisories/21436"},{"name":"ADV-2006-3225","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2006/3225"},{"name":"21527","refsource":"SECUNIA","url":"http://secunia.com/advisories/21527"},{"name":"27870","refsource":"OSVDB","url":"http://www.osvdb.org/27870"},{"name":"http://www.pdc.kth.se/heimdal/advisory/2006-08-08/","refsource":"CONFIRM","url":"http://www.pdc.kth.se/heimdal/advisory/2006-08-08/"},{"name":"20060808 MITKRB-SA-2006-001: multiple local privilege escalation vulnerabilities","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/442599/100/0/threaded"},{"name":"oval:org.mitre.oval:def:9515","refsource":"OVAL","url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9515"},{"name":"21439","refsource":"SECUNIA","url":"http://secunia.com/advisories/21439"},{"name":"21402","refsource":"SECUNIA","url":"http://secunia.com/advisories/21402"},{"name":"20060816 UPDATED: MITKRB5-SA-2006-001: multiple local privilege escalation vulnerabilities","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/443498/100/100/threaded"},{"name":"21613","refsource":"SECUNIA","url":"http://secunia.com/advisories/21613"},{"name":"SUSE-SR:2006:022","refsource":"SUSE","url":"http://www.novell.com/linux/security/advisories/2006_22_sr.html"},{"name":"1016664","refsource":"SECTRACK","url":"http://securitytracker.com/id?1016664"},{"name":"21441","refsource":"SECUNIA","url":"http://secunia.com/advisories/21441"},{"name":"22291","refsource":"SECUNIA","url":"http://secunia.com/advisories/22291"},{"name":"21456","refsource":"SECUNIA","url":"http://secunia.com/advisories/21456"},{"name":"GLSA-200608-15","refsource":"GENTOO","url":"http://www.gentoo.org/security/en/glsa/glsa-200608-15.xml"},{"name":"21423","refsource":"SECUNIA","url":"http://secunia.com/advisories/21423"},{"name":"USN-334-1","refsource":"UBUNTU","url":"http://www.ubuntu.com/usn/usn-334-1"},{"name":"19427","refsource":"BID","url":"http://www.securityfocus.com/bid/19427"}]}},"nvd":{"publishedDate":"2006-08-09 10:04:00","lastModifiedDate":"2020-01-21 15:45:00","problem_types":["CWE-399"],"metrics":{"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"severity":"HIGH","exploitabilityScore":3.9,"impactScore":10,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:heimdal:heimdal:0.7.2:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:mit:kerberos_5:1.4:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:mit:kerberos_5:1.4.1:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:mit:kerberos_5:1.4.2:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:mit:kerberos_5:1.4.3:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:mit:kerberos_5:1.5:*:*:*:*:*:*:*","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2006","CveId":"3083","Ordinal":"18408","Title":"CVE-2006-3083","CVE":"CVE-2006-3083","Year":"2006"},"notes":[{"CveYear":"2006","CveId":"3083","Ordinal":"1","NoteData":"The (1) krshd and (2) v4rcp applications in (a) MIT Kerberos 5 (krb5) up to 1.5, and 1.4.x before 1.4.4, when running on Linux and AIX, and (b) Heimdal 0.7.2 and earlier, do not check return codes for setuid calls, which allows local users to gain privileges by causing setuid to fail to drop privileges using attacks such as resource exhaustion.","Type":"Description","Title":null},{"CveYear":"2006","CveId":"3083","Ordinal":"2","NoteData":"2006-08-09","Type":"Other","Title":"Published"},{"CveYear":"2006","CveId":"3083","Ordinal":"3","NoteData":"2018-10-18","Type":"Other","Title":"Modified"}]}}}