CVE-2009-0361

CVE-2009-0361 describes a privilege escalation vulnerability in Russ Allbery pam-krb5 versions prior to 3.13, affecting products like libpam-heimdal and Solaris 10's su utility. A local attacker can exploit this by manipulating the KRB5CCNAME environment variable and launching a setuid application that uses specific pam_setcred operations. This allows for the overwriting and changing of ownership of arbitrary files, leading to potential confidentiality, integrity, and availability impacts, as reflected by its CVSS score of 4.6 (AV:L/AC:L/Au:N/C:P/I:P/A:P). There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this decade-old vulnerability.