| Package | Affected versions | Patched versions |
|---|---|---|
| libgssapi | = 0.1= 0.2≤ 0.3 | |
| libgssglue | = 0.1= 0.2≤ 0.3 |
libgssapi and libgssglue before 0.4 do not properly check privileges, which allows local users to load untrusted configuration files and execute arbitrary code via the GSSAPI_MECH_CONF environment variable, as demonstrated using mount.nfs.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free