Debian Security Advisory 1146-1 – In certain application programs packaged in the MIT Kerberos 5 source distribution, calls to setuid() and seteuid() are not always checked for success and which may fail with some PAM configurations. A local user could exploit one of these vulnerabilities to result in privilege escalation. No exploit code is known to exist at this time.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/49221/dsa-1146-1.txt
Source: https://packetstormsecurity.com/files/49221/Debian-Linux-Security-Advisory-1146-1.html