CVE-2002-0754: Freebsd

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

Kerberos 5 su (k5su) in FreeBSD 4.4 and earlier relies on the getlogin system call to determine if the user running k5su is root, which could allow a root-initiated process to regain its privileges after it has dropped them.

Affected products

• Freebsd Freebsd: version 4.0 only; version 4.1 only; version 4.1.1 only; version 4.2 only; version 4.3 only; version 4.4 only
• Freebsd Heimdal: version 0.4e only
• Kth Heimdal: version 0.4e only

Published 2002-08-12. Last modified 2026-06-16.