ID de Prueba:	1.3.6.1.4.1.25623.1.0.51321
Categoría:	Conectiva Local Security Checks
Título:	Conectiva Security Advisory CLA-2005:917
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory CLA-2005:917. The krb5 packages are MIT's[1] implementation of the Kerberos 5 authentication protocol. Michael Tautschnig noticed that the MIT Kerberos 5 administration library (libkadm5srv) contains a heap buffer overflow[2] in password history handling code which could be exploited by an authenticated user to execute arbitrary code on a Key Distribution Center (KDC) host. For further information about this vulnerability, please refer to MIT krb5 Security Advisory 2004-004[3]. Solution: The apt tool can be used to perform RPM package upgrades by running 'apt-get update' followed by 'apt-get upgrade' http://web.mit.edu/Kerberos/www/index.html http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1189 http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2004-004-pwhist.txt http://www.securityspace.com/smysecure/catid.html?in=CLA-2005:917 http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000917 Risk factor : High CVSS Score: 7.2
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2004-1189 http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html Bugtraq: 20041220 MITKRB5-SA-2004-004: heap overflow in libkadm5srv (Google Search) http://marc.info/?l=bugtraq&m=110358420909358&w=2 Bugtraq: 20050110 [USN-58-1] MIT Kerberos server vulnerability (Google Search) http://marc.info/?l=bugtraq&m=110548298407590&w=2 Conectiva Linux advisory: CLA-2005:917 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000917 http://www.mandriva.com/security/advisories?name=MDKSA-2004:156 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11911 http://www.redhat.com/support/errata/RHSA-2005-012.html http://www.redhat.com/support/errata/RHSA-2005-045.html http://www.trustix.org/errata/2004/0069 XForce ISS Database: kerberos-libkadm5srv-bo(18621) https://exchange.xforce.ibmcloud.com/vulnerabilities/18621
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.