Unscored severity · published Feb 8, 2006
CVE-2006-0582
Unspecified vulnerability in rshd in Heimdal 0.6.x before 0.6.6 and 0.7.x before 0.7.2, when storing forwarded credentials, allows attackers to overwrite arbitrary files and…
–
CVSS
0.5%
EPSS
No
On KEV
Description
Unspecified vulnerability in rshd in Heimdal 0.6.x before 0.6.6 and 0.7.x before 0.7.2, when storing forwarded credentials, allows attackers to overwrite arbitrary files and change file ownership via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 39% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HE
Heimdal · Kth
0.6.1; 0.6.2; 0.6.3; 0.6.4; 0.6.5; 0.7.1; +3 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-0582
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-0582
Patch
http://secunia.com/advisories/18733
Patch
http://secunia.com/advisories/18806
Patch
http://secunia.com/advisories/18894
Patch
http://secunia.com/advisories/19005
Patch
http://secunia.com/advisories/19302
securitytracker.com
http://securitytracker.com/id?1015591
More from Heimdal
–
CVE-2006-0677
telnetd in Heimdal 0.6.x before 0.6.6 and 0.7.x before 0.7.2 allows remote unauthenticated attackers to cause a denial of service (server crash) via unknown vectors that trigger a…
–
CVE-2004-0371
Heimdal 0.6.x before 0.6.1 and 0.5.x before 0.5.3 does not properly perform certain consistency checks for cross-realm requests, which allows remote attackers with control of a…
–
CVE-2002-1225
Multiple buffer overflows in Heimdal before 0.5, possibly in both the (1) kadmind and (2) kdc servers, may allow remote attackers to gain root access
–
CVE-2002-1226
Unknown vulnerabilities in Heimdal before 0.5 with unknown impact, possibly in the (1) kadmind and (2) kdc servers, may allow remote or local attackers to gain root or other…
–
CVE-2002-0754
Kerberos 5 su (k5su) in FreeBSD 4.4 and earlier relies on the getlogin system call to determine if the user running k5su is root, which could allow a root-initiated process to…