CVE-2008-5690

The Kerberos credential renewal feature in Sun Solaris 8, 9, and 10, and OpenSolaris build snv_01 through snv_104, allows local users to cause a denial of service (authentication failure) via unspecified vectors related to incorrect cache file permissions, and lack of credential storage by the store_cred function in pam_krb5.

• CWE-255

• http://secunia.com/advisories/33042Vendor Advisory
• http://secunia.com/advisories/33313Patch, Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-112908-33-1Patch, Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-244866-1Vendor Advisory
• http://support.avaya.com/elmodocs2/security/ASA-2008-515.htm
• http://www.securityfocus.com/bid/32793
• http://www.securitytracker.com/id?1021390
• http://www.vupen.com/english/advisories/2008/3428Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47291
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5792
• http://secunia.com/advisories/33042Vendor Advisory
• http://secunia.com/advisories/33313Patch, Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-112908-33-1Patch, Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-244866-1Vendor Advisory
• http://support.avaya.com/elmodocs2/security/ASA-2008-515.htm
• http://www.securityfocus.com/bid/32793
• http://www.securitytracker.com/id?1021390
• http://www.vupen.com/english/advisories/2008/3428Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47291
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5792

Published

Dec 19, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-5684Unspecified vulnerability in the X Inter Client Exchange lib…
• CVE-2008-5685Sun ScApp firmware 5.18.x, 5.19.x, and 5.20.0 through 5.20.1…
• CVE-2008-5686IBM Tivoli Provisioning Manager (TPM) before 5.1.1.1 IF0006,…
• CVE-2008-5687MediaWiki 1.11, and other versions before 1.13.3, does not p…
• CVE-2008-5688MediaWiki 1.8.1, and other versions before 1.13.3, when the …
• CVE-2008-5689tun in IP Tunnel in Solaris 10 and OpenSolaris snv_01 throug…
• CVE-2008-5691Heap-based buffer overflow in the Phoenician Casino FlashAX …
• CVE-2008-5692Ipswitch WS_FTP Server Manager before 6.1.1, and possibly ot…
• CVE-2008-5693Ipswitch WS_FTP Server Manager 6.1.0.0 and earlier, and poss…
• CVE-2008-5694PHP remote file inclusion vulnerability in lib/jpgraph/jpgra…
• CVE-2008-5695wp-admin/options.php in WordPress MU before 1.3.2, and WordP…
• CVE-2008-5696Novell NetWare 6.5 before Support Pack 8, when an OES2 Linux…