Test Kennung:	1.3.6.1.4.1.25623.1.0.51321
Kategorie:	Conectiva Local Security Checks
Titel:	Conectiva Security Advisory CLA-2005:917
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing updates announced in advisory CLA-2005:917. The krb5 packages are MIT's[1] implementation of the Kerberos 5 authentication protocol. Michael Tautschnig noticed that the MIT Kerberos 5 administration library (libkadm5srv) contains a heap buffer overflow[2] in password history handling code which could be exploited by an authenticated user to execute arbitrary code on a Key Distribution Center (KDC) host. For further information about this vulnerability, please refer to MIT krb5 Security Advisory 2004-004[3]. Solution: The apt tool can be used to perform RPM package upgrades by running 'apt-get update' followed by 'apt-get upgrade' http://web.mit.edu/Kerberos/www/index.html http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1189 http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2004-004-pwhist.txt http://www.securityspace.com/smysecure/catid.html?in=CLA-2005:917 http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000917 Risk factor : High CVSS Score: 7.2
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2004-1189 http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html Bugtraq: 20041220 MITKRB5-SA-2004-004: heap overflow in libkadm5srv (Google Search) http://marc.info/?l=bugtraq&m=110358420909358&w=2 Bugtraq: 20050110 [USN-58-1] MIT Kerberos server vulnerability (Google Search) http://marc.info/?l=bugtraq&m=110548298407590&w=2 Conectiva Linux advisory: CLA-2005:917 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000917 http://www.mandriva.com/security/advisories?name=MDKSA-2004:156 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11911 http://www.redhat.com/support/errata/RHSA-2005-012.html http://www.redhat.com/support/errata/RHSA-2005-045.html http://www.trustix.org/errata/2004/0069 XForce ISS Database: kerberos-libkadm5srv-bo(18621) https://exchange.xforce.ibmcloud.com/vulnerabilities/18621
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.