Test ID:	1.3.6.1.4.1.25623.1.0.52650
Category:	FreeBSD Local Security Checks
Title:	FreeBSD Security Advisory (FreeBSD-SA-04:08.heimdal.asc)
Summary:	The remote host is missing an update to the system; as announced in the referenced advisory FreeBSD-SA-04:08.heimdal.asc
Description:	Summary: The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-04:08.heimdal.asc Vulnerability Insight: Heimdal implements the Kerberos 5 network authentication protocols. Principals (i.e. users and services) represented in Kerberos are grouped into separate, autonomous realms. Unidirectional or bidirectional trust relationships may be established between realms to allow the principals in one realm to recognize the authenticity of principals in another. These trust relationships may be transitive. An authentication path is the ordered list of realms (and therefore KDCs) that were involved in the authentication process. The authentication path is recorded in Kerberos tickets as the `transited' field. It is possible for the Key Distribution Center (KDC) of a realm to forge part or all of the `transited' field. KDCs should validate this field before accepting authentication results, checking that each realm in the authentication path is trusted and that the path conforms to local policy. Applications are required to perform this type of checking if the KDC has not already done so. Prior to FreeBSD 5.1, Kerberos 5 was an optional component of FreeBSD, and was not installed by default. Some versions of Heimdal do not perform appropriate checking of the `transited' field. Solution: Upgrade your system to the appropriate stable release or security branch dated after the correction date. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2004-0371 Debian Security Information: DSA-476 (Google Search) http://www.debian.org/security/2004/dsa-476 FreeBSD Security Advisory: FreeBSD-SA-04:08 ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:08.heimdal.asc http://security.gentoo.org/glsa/glsa-200404-09.xml OpenBSD Security Advisory: 20040530 009: SECURITY FIX: May 30, 2004 ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/009_kerberos.patch XForce ISS Database: heimdal-cross-realm-spoofing(15701) https://exchange.xforce.ibmcloud.com/vulnerabilities/15701
Copyright	Copyright (C) 2008 E-Soft Inc.

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.