CVE:CVE-2011-1526
CNNVD:CNNVD-201107-074
MIT Kerberos 5应用程序（krb5-appl） 1.0.1及早期版本的GSS-API FTP守护进程中的ftpd.c不能检查krb5_setegid返回值。远程认证用户可借助标准FTP命令绕过预设的群访问限制，并创建，覆盖，删除或读取文件，前提是组群所有者是FTP守护进程的初始有效组ID（EGID）。
solution:Upgrade mit krb5-appl to a higher version than 1.0.1,and avoid the version (,1.0.1); Upgrade debian debian_linux to a higher version than 5.0,6.0,and avoid the version 5.0,6.0; Upgrade fedoraproject fedora to a higher version than 14,15,and avoid the version 14,15; Upgrade opensuse opensuse to a higher version than 11.3,11.4,and avoid the version 11.3,11.4; Upgrade suse linux_enterprise_desktop to a higher version than 10:sp4,11:sp1,and avoid the version 10:sp4,11:sp1; Upgrade suse linux_enterprise_server to a higher version than 10:sp2,10:sp3,10:sp4,11:sp1,and avoid the version 10:sp2,10:sp3,10:sp4,11:sp1; Upgrade suse linux_enterprise_software_development_kit to a higher version than 10:sp4,11:sp1,and avoid the version 10:sp4,11:sp1