VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Aug 12, 2002· Updated Apr 16, 2026

CVE-2002-0754

CVE-2002-0754

Description

Kerberos 5 su (k5su) in FreeBSD 4.4 and earlier relies on the getlogin system call to determine if the user running k5su is root, which could allow a root-initiated process to regain its privileges after it has dropped them.

Affected products

13
  • FreeBSD/Heimdal
    cpe:2.3:a:freebsd:heimdal:0.4e:*:*:*:*:*:*:*
  • Kth/Heimdal
    cpe:2.3:a:kth:heimdal:0.4e:*:*:*:*:*:*:*
  • FreeBSD/FreeBSD11 versions
    cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*+ 10 more
    • cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:4.1.1:release:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:4.1.1:stable:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:4.2:stable:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:4.3:release:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:4.3:stable:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.