Directory Permissions Vulnerability in MIT krb5-appl by MIT

CVE-2019-25018

What is CVE-2019-25018?

A vulnerability exists in the rcp client of MIT krb5-appl versions up to 1.0.3, where malicious servers can exploit filename manipulations, such as using a single dot or leaving the filename empty, to bypass intended access restrictions. This can result in unauthorized modifications to the target directory's permissions on the client side. Although the affected version is shipped by some Linux distributions, it is important to note that MIT krb5-appl has not received upstream support, and the vulnerable code was removed from the official MIT Kerberos 5 product long before this vulnerability was identified.

References