CVE-2011-1758

CVE-2011-1758 describes a Kerberos authentication bypass vulnerability in System Security Services Daemon (SSSD) versions 1.5.x prior to 1.5.7, specifically affecting Fedora Project SSSD. When automatic ticket renewal and offline authentication are enabled, the krb5_save_ccname_done function incorrectly uses a pathname as a password, allowing local attackers to bypass authentication by listing the /tmp directory. This vulnerability has a low CVSS score of 3.7 (AV:L/AC:H/Au:N/C:P/I:P/A:P), indicating a local attack vector with high access complexity and partial impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.