ID de Prueba:	1.3.6.1.4.1.25623.1.0.69596
Categoría:	FreeBSD Local Security Checks
Título:	FreeBSD Ports: krb5
Resumen:	The remote host is missing an update to the system; as announced in the referenced advisory.
Descripción:	Summary: The remote host is missing an update to the system as announced in the referenced advisory. Vulnerability Insight: The following package is affected: krb5 CVE-2011-0284 Double free vulnerability in the prepare_error_as function in do_as_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 through 1.9, when the PKINIT feature is enabled, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via an e_data field containing typed data. Solution: Update your system with the appropriate patches or software upgrades. CVSS Score: 7.6 CVSS Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2011-0284 BugTraq ID: 46881 http://www.securityfocus.com/bid/46881 Bugtraq: 20110315 MITKRB5-SA-2011-003 [CVE-2011-0284] KDC double-free when PKINIT enabled (Google Search) http://www.securityfocus.com/archive/1/517029/100/0/threaded CERT/CC vulnerability note: VU#943220 http://www.kb.cert.org/vuls/id/943220 http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056579.html http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056573.html http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056413.html http://www.mandriva.com/security/advisories?name=MDVSA-2011:048 http://osvdb.org/71183 http://www.redhat.com/support/errata/RHSA-2011-0356.html http://securitytracker.com/id?1025216 http://secunia.com/advisories/43700 http://secunia.com/advisories/43760 http://secunia.com/advisories/43783 http://secunia.com/advisories/43881 SuSE Security Announcement: SUSE-SR:2011:005 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html http://www.ubuntu.com/usn/USN-1088-1 http://www.vupen.com/english/advisories/2011/0672 http://www.vupen.com/english/advisories/2011/0673 http://www.vupen.com/english/advisories/2011/0680 http://www.vupen.com/english/advisories/2011/0722 http://www.vupen.com/english/advisories/2011/0763 XForce ISS Database: kerberos-perpareerroras-code-execution(66101) https://exchange.xforce.ibmcloud.com/vulnerabilities/66101
Copyright	Copyright (C) 2011 E-Soft Inc.

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.