Debian-LAN Kerberos ACLs let authenticated users change others' credentials
Original title: USN-9068-1: Debian-LAN vulnerability
Ubuntu notice USN-9068-1 says overly permissive Kerberos admin ACLs can lead to privilege escalation.
Wolfgang Schweer found that Debian-LAN configured overly permissive ACLs for the Kerberos admin server. An authenticated user could use the issue to change other users' credentials and escalate privileges. The notice snippet does not name affected versions, a fix, or exploitation.
Unconfirmed: Affected releases, a fixed version, and whether the issue is exploited are not stated.
- Discovery is credited to Wolfgang Schweer.
- The flaw is overly permissive ACLs on the Kerberos admin server.
- Impact requires an authenticated user.
- No CVE, versions, or patch level appear in the snippet.
Impact: change other users' credentials and escalate privileges
| Product | Affected |
|---|---|
| Debian-LAN | — |
- Vendors
- Debian
- Products
- Debian-LAN
- Organizations
- Ubuntu
From the original article
Wolfgang Schweer discovered that Debian-LAN configured overly permissive ACLs for the Kerberos admin server. An authenticated user could possibly use this issue to change the credentials of other users, leading to privilege escalation.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.