mirror of
https://github.com/0xMarcio/cve.git
synced 2026-03-25 23:50:23 +01:00
693 B
693 B
CVE-2011-2709
Description
libgssapi and libgssglue before 0.4 do not properly check privileges, which allows local users to load untrusted configuration files and execute arbitrary code via the GSSAPI_MECH_CONF environment variable, as demonstrated using mount.nfs.
POC
Reference
No PoCs from references.