CVE-2006-3083

The (1) krshd and (2) v4rcp applications in (a) MIT Kerberos 5 (krb5) up to 1.5, and 1.4.x before 1.4.4, when running on Linux and AIX, and (b) Heimdal 0.7.2 and earlier, do not check return codes for setuid calls, which allows local users to gain privileges by causing setuid to fail to drop privileges using attacks such as resource exhaustion.

Published: 2006-08-09 Last update: 2026-04-16 Assigner: [email protected] Source: [email protected]

Conclusion & alert: CVE-2006-3083 is rated Moderate Risk (45.3/100): CVSS High severity, with low exploitation likelihood (EPSS 0.12%). Mandatory action: Review affected assets and schedule remediation.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Exploit prediction scoring system (EPSS) score for CVE-2006-3083

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2024-12-17 0.04% 0.12% +0.08%
2 2023-03-07 1.55% 0.04% -1.50%
3 2022-02-04 1.55%

Full EPSS history (3 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2006-3083

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
7.2 2.0 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C Click to expand
Access vector (AV:L)
Requires local access to the target system.
Access complexity (AC:L)
Exploitation conditions are straightforward and predictable.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:C)
Complete confidentiality impact.
Integrity impact (I:C)
Complete integrity impact.
Availability impact (A:C)
Complete availability impact.
3.9 10.0 [email protected]

Weakness enumeration for CVE-2006-3083

OS Trackers for CVE-2006-3083

vendor priority summary link
debian medium CVE-2006-3083 medium priority: Debian including 1 source packages (krb5), 5 status rows across 5 suites (bookworm, bullseye, forky, sid, trixie): resolved 5. https://security-tracker.debian.org/tracker/CVE-2006-3083
gentoo high CVE-2006-3083: 2 GLSA(s) (200608-15, 200608-21), 2 atom(s) (app-crypt/heimdal, app-crypt/mit-krb5); latest impact high. https://bugs.gentoo.org/buglist.cgi?quicksearch=CVE-2006-3083
redhat high https://access.redhat.com/security/cve/CVE-2006-3083
ubuntu medium CVE-2006-3083 medium priority: Ubuntu including 1 source packages (krb5), 4 status rows across 4 suites (dapper, edgy, feisty, upstream): released 3, needs-triage 1. https://ubuntu.com/security/CVE-2006-3083

Vendor comments (NVD) for CVE-2006-3083

  • Red Hat (2007-03-14T00:00:00)

    Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.

Affected software / configurations for CVE-2006-3083

Vendor Product Version Raw CPE
heimdal heimdal 0.7.2 cpe:2.3:a:heimdal:heimdal:0.7.2:*:*:*:*:*:*:*
mit kerberos_5 1.4 cpe:2.3:a:mit:kerberos_5:1.4:*:*:*:*:*:*:*
mit kerberos_5 1.4.1 cpe:2.3:a:mit:kerberos_5:1.4.1:*:*:*:*:*:*:*
mit kerberos_5 1.4.2 cpe:2.3:a:mit:kerberos_5:1.4.2:*:*:*:*:*:*:*
mit kerberos_5 1.4.3 cpe:2.3:a:mit:kerberos_5:1.4.3:*:*:*:*:*:*:*
mit kerberos_5 1.5 cpe:2.3:a:mit:kerberos_5:1.5:*:*:*:*:*:*:*

References for CVE-2006-3083

URL Tags
ftp://ftp.pdc.kth.se/pub/heimdal/src/heimdal-0.7.2-setuid-patch.txt
http://secunia.com/advisories/21402 Vendor Advisory
http://secunia.com/advisories/21423 Vendor Advisory
http://secunia.com/advisories/21436 Vendor Advisory
http://secunia.com/advisories/21439 Vendor Advisory
http://secunia.com/advisories/21441 Vendor Advisory
http://secunia.com/advisories/21456 Vendor Advisory
http://secunia.com/advisories/21461 Vendor Advisory
http://secunia.com/advisories/21467 Vendor Advisory
http://secunia.com/advisories/21527 Vendor Advisory
http://secunia.com/advisories/21613 Vendor Advisory
http://secunia.com/advisories/21847 Vendor Advisory
http://secunia.com/advisories/22291 Vendor Advisory
http://security.gentoo.org/glsa/glsa-200608-21.xml
http://securitytracker.com/id?1016664
http://support.avaya.com/elmodocs2/security/ASA-2006-211.htm
http://web.mit.edu/Kerberos/advisories/MITKRB5-SA-2006-001-setuid.txt Patch Vendor Advisory
http://www.debian.org/security/2006/dsa-1146
http://www.gentoo.org/security/en/glsa/glsa-200608-15.xml
http://www.kb.cert.org/vuls/id/580124 Patch US Government Resource
http://www.mandriva.com/security/advisories?name=MDKSA-2006:139
http://www.novell.com/linux/security/advisories/2006_20_sr.html
http://www.novell.com/linux/security/advisories/2006_22_sr.html
http://www.osvdb.org/27869
http://www.osvdb.org/27870
http://www.pdc.kth.se/heimdal/advisory/2006-08-08/
http://www.redhat.com/support/errata/RHSA-2006-0612.html Patch Vendor Advisory
http://www.securityfocus.com/archive/1/442599/100/0/threaded
http://www.securityfocus.com/archive/1/443498/100/100/threaded
http://www.securityfocus.com/bid/19427
http://www.ubuntu.com/usn/usn-334-1
http://www.vupen.com/english/advisories/2006/3225 Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9515
cvelogic Threat Intelligence