CVE-2002-0754

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2002-08-12 · updated 2026-06-16

Description

Kerberos 5 su (k5su) in FreeBSD 4.4 and earlier relies on the getlogin system call to determine if the user running k5su is root, which could allow a root-initiated process to regain its privileges after it has dropped them.

Affected products

FreeBSD: 4.0, 4.1, 4.1.1, 4.1.1-release, 4.1.1-stable, 4.2 (+5)
FreeBSD Heimdal: 0.4e
Kth Heimdal: 0.4e

References

http://www.iss.net/security_center/static/7956.php
http://www.securityfocus.com/bid/3919
http://www.iss.net/security_center/static/7956.php
http://www.securityfocus.com/bid/3919

Get alerted when CVE-2002-0754 or the next vulnerability affects your stack