The Kerberos credential renewal feature in Sun Solaris 8, 9, and 10, and OpenSolaris build snv_01 through snv_104, allows local users to cause a denial of service (authentication failure) via unspecified vectors related to incorrect cache file permissions, and lack of credential storage by the store_cred function in pam_krb5.

SunOS 5.10_x86: pam_krb5.so.1 patch.
Date this patch was last updated by Sun : Dec/09/08

SunOS 5.10: pam_krb5.so.1 patch.
Date this patch was last updated by Sun : Dec/09/08

SunOS 5.9_x86: krb5, gss patch.
Date this patch was last updated by Sun : Sep/14/10

SunOS 5.9: krb5, gss patch.
Date this patch was last updated by Sun : Sep/14/10

ID	Name	Product	Family	Severity
108012	Solaris 10 (x86) : 139479-01	Nessus	Solaris Local Security Checks	low
107515	Solaris 10 (sparc) : 139478-01	Nessus	Solaris Local Security Checks	low
37287	Solaris 10 (x86) : 139479-01	Nessus	Solaris Local Security Checks	medium
36814	Solaris 10 (sparc) : 139478-01	Nessus	Solaris Local Security Checks	medium
13620	Solaris 9 (x86) : 115168-24	Nessus	Solaris Local Security Checks	critical
13520	Solaris 9 (sparc) : 112908-38	Nessus	Solaris Local Security Checks	critical

Detections

Analytics

CVE-2008-5690

medium

Tenable Plugins

low

low

medium

medium

critical

critical