OpenBSD rexecd, rshd, atrun BSD Authentication Implementation Error Vulnerability
BID:4338
Info
OpenBSD rexecd, rshd, atrun BSD Authentication Implementation Error Vulnerability
| Bugtraq ID: | 4338 |
| Class: | Design Error |
| CVE: |
CVE-2002-0557 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 19 2002 12:00AM |
| Updated: | Jul 11 2009 11:56AM |
| Credit: | This vulnerability was announced by the OpenBSD project. |
| Vulnerable: |
OpenBSD OpenBSD 2.9 OpenBSD OpenBSD 2.8 OpenBSD OpenBSD 2.7 OpenBSD OpenBSD 2.6 OpenBSD OpenBSD 3.0 |
| Not Vulnerable: | |
Discussion
OpenBSD rexecd, rshd, atrun BSD Authentication Implementation Error Vulnerability
At least three OpenBSD userland utilities contain errors in the implementation of BSD authentication that may have security implications. Under certain circumstances, conditions may occur in rexecd, rshd and atrun where properties of users other than those of the process owner may be used. For example, rexecd may run with the shell of another user and atrun may chdir() to another user's home directory. This may occur when YP/NIS is in use.
In some environments, this may be a security concern (for example, if restricted shells are set for certain users).
At least three OpenBSD userland utilities contain errors in the implementation of BSD authentication that may have security implications. Under certain circumstances, conditions may occur in rexecd, rshd and atrun where properties of users other than those of the process owner may be used. For example, rexecd may run with the shell of another user and atrun may chdir() to another user's home directory. This may occur when YP/NIS is in use.
In some environments, this may be a security concern (for example, if restricted shells are set for certain users).