eyrie records
4 published records for vendor eyrie.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-287 Improper Authentication2
- CWE-264 Permissions, Privileges, and Access Controls1
- CWE-416 Use After Free1
The weakness classes this vendor ships most often: where to look.
CWEAll records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
29Monitor | CVE-2018-0493No exploit | remctld in remctl before 3.14, when an attacker is authorized to execute a command that uses the sudo option, has a use-after-free that leadeyrie · remctl · CWE-416 | High7.2 | — | 2.4% | Apr 3, 2018 |
24Monitor | CVE-2009-0360Proof of concept | Russ Allbery pam-krb5 before 3.13, when linked against MIT Kerberos, does not properly initialize the Kerberos libraries for setuid use, whieyrie · pam-krb5 · CWE-287 | Medium6.2 | — | 0.6% | Feb 13, 2009 |
21Monitor | CVE-2009-1384No exploit | pam_krb5 2.2.14 through 2.3.4, as used in Red Hat Enterprise Linux (RHEL) 5, generates different password prompts depending on whether the uredhat · enterprise linux · CWE-287 | Medium5.0 | — | 2.8% | May 28, 2009 |
18Monitor | CVE-2009-0361No exploit | Russ Allbery pam-krb5 before 3.13, as used by libpam-heimdal, su in Solaris 10, and other software, does not properly handle calls to pam_seeyrie · pam-krb5 · CWE-264 | Medium4.6 | — | 0.3% | Feb 13, 2009 |
- CVE-2018-049329Monitor
remctld in remctl before 3.14, when an attacker is authorized to execute a command that uses the sudo option, has a use-after-free that lead
HighCVSS 7.2No exploitEPSS 2%eyrie · remctlApr 3, 2018
- CVE-2009-036024Monitor
Russ Allbery pam-krb5 before 3.13, when linked against MIT Kerberos, does not properly initialize the Kerberos libraries for setuid use, whi
MediumCVSS 6.2Proof of conceptEPSS 0%eyrie · pam-krb5Feb 13, 2009
- CVE-2009-138421Monitor
pam_krb5 2.2.14 through 2.3.4, as used in Red Hat Enterprise Linux (RHEL) 5, generates different password prompts depending on whether the u
MediumCVSS 5.0No exploitEPSS 2%redhat · enterprise linuxMay 28, 2009
- CVE-2009-036118Monitor
Russ Allbery pam-krb5 before 3.13, as used by libpam-heimdal, su in Solaris 10, and other software, does not properly handle calls to pam_se
MediumCVSS 4.6No exploitEPSS 0%eyrie · pam-krb5Feb 13, 2009