A security vulnerability in pam-krb5 allowing overwrite and chown of arbitrary files via Solaris su was discovered by Derek Chan and reported by Steven Luo on 2009-01-29. Subsequent code auditing for behavior in setuid applications uncovered another, more general and more serious bug that could result in privilege escalation. Versions below 3.13 are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/74879/pamkrb5-overwrite.txt
Source: https://packetstormsecurity.com/files/74879/pam-krb5-File-Ovewrite.html