ID de Prueba:	1.3.6.1.4.1.25623.1.0.870700
Categoría:	Red Hat Local Security Checks
Título:	RedHat Update for krb5 RHSA-2011:0447-01
Resumen:	The remote host is missing an update for the 'krb5'; package(s) announced via the referenced advisory.
Descripción:	Summary: The remote host is missing an update for the 'krb5' package(s) announced via the referenced advisory. Vulnerability Insight: Kerberos is a network authentication system which allows clients and servers to authenticate to each other using symmetric encryption and a trusted third-party, the Key Distribution Center (KDC). An invalid free flaw was found in the password-changing capability of the MIT Kerberos administration daemon, kadmind. A remote, unauthenticated attacker could use this flaw to cause kadmind to abort via a specially-crafted request. (CVE-2011-0285) All krb5 users should upgrade to these updated packages, which contain a backported patch to correct this issue. After installing the updated packages, the kadmind daemon will be restarted automatically. Affected Software/OS: krb5 on Red Hat Enterprise Linux Desktop (v. 6), Red Hat Enterprise Linux Server (v. 6), Red Hat Enterprise Linux Workstation (v. 6) Solution: Please Install the Updated Packages. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2011-0285 BugTraq ID: 47310 http://www.securityfocus.com/bid/47310 Bugtraq: 20110413 MITKRB5-SA-2011-004 kadmind invalid pointer free() [CVE-2011-0285] (Google Search) http://www.securityfocus.com/archive/1/517484/100/0/threaded http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058181.html http://www.mandriva.com/security/advisories?name=MDVSA-2011:077 http://osvdb.org/71789 http://www.redhat.com/support/errata/RHSA-2011-0447.html http://www.securitytracker.com/id?1025320 http://secunia.com/advisories/44125 http://secunia.com/advisories/44181 http://secunia.com/advisories/44196 http://securityreason.com/securityalert/8200 SuSE Security Announcement: openSUSE-SU-2011:0348 (Google Search) https://hermes.opensuse.org/messages/8086843 http://www.vupen.com/english/advisories/2011/0936 http://www.vupen.com/english/advisories/2011/0986 http://www.vupen.com/english/advisories/2011/0997
Copyright	Copyright (C) 2012 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.