VULNERABILITY INTELLIGENCE

CVE-2011-2709

CVSS score6.2 MEDIUM

EPSS probability0.44%

CISA KEVNot currently listed

Published2012-06-21

Last modified2026-06-16

Description

libgssapi and libgssglue before 0.4 do not properly check privileges, which allows local users to load untrusted configuration files and execute arbitrary code via the GSSAPI_MECH_CONF environment variable, as demonstrated using mount.nfs.