Test ID:	1.3.6.1.4.1.25623.1.0.71441
Category:	Red Hat Local Security Checks
Title:	RedHat Security Advisory RHSA-2012:1131
Summary:	NOSUMMARY
Description:	Description: The remote host is missing updates announced in advisory RHSA-2012:1131. Kerberos is a network authentication system which allows clients and servers to authenticate to each other using symmetric encryption and a trusted third-party, the Key Distribution Center (KDC). An uninitialized pointer use flaw was found in the way the MIT Kerberos KDC handled initial authentication requests (AS-REQ). A remote, unauthenticated attacker could use this flaw to crash the KDC via a specially-crafted AS-REQ request. (CVE-2012-1015) A NULL pointer dereference flaw was found in the MIT Kerberos administration daemon, kadmind. A Kerberos administrator who has the create privilege could use this flaw to crash kadmind. (CVE-2012-1013) Red Hat would like to thank the MIT Kerberos project for reporting CVE-2012-1015. Upstream acknowledges Emmanuel Bouillon (NCI Agency) as the original reporter of CVE-2012-1015. All krb5 users should upgrade to these updated packages, which contain backported patches to correct these issues. After installing the updated packages, the krb5kdc and kadmind daemons will be restarted automatically. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2012-1131.html http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2012-001.txt Risk factor : High
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-1013 BugTraq ID: 53784 http://www.securityfocus.com/bid/53784 http://www.mandriva.com/security/advisories?name=MDVSA-2012:102 http://mailman.mit.edu/pipermail/kerberos-announce/2012q2/000136.html RedHat Security Advisories: RHSA-2012:1131 http://rhn.redhat.com/errata/RHSA-2012-1131.html SuSE Security Announcement: openSUSE-SU-2012:0834 (Google Search) https://hermes.opensuse.org/messages/15083635 Common Vulnerability Exposure (CVE) ID: CVE-2012-1015 Debian Security Information: DSA-2518 (Google Search) http://www.debian.org/security/2012/dsa-2518 http://www.mandriva.com/security/advisories?name=MDVSA-2012:120 SuSE Security Announcement: openSUSE-SU-2012:0967 (Google Search) http://lists.opensuse.org/opensuse-updates/2012-08/msg00016.html
Copyright	Copyright (c) 2012 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.