Test ID:	1.3.6.1.4.1.25623.1.0.52936
Category:	Turbolinux Local Security Tests
Title:	Turbolinux TLSA-2003-29 (krb5)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to krb5 announced via advisory TLSA-2003-29. - A faulty length check in the RPC library exposes kadmind to an integer overflow. - A vulnerability may allow the use of cut-and-paste attacks to fabricate krb4 tickets for unauthorized client principals if triple-DES keys are used to key krb4 services. - Buffer overrun and underrun problems exist in Kerberos principal name handling in unusual cases, such as names with zero components, names with one empty component, or host-based service principal names with no host name component. These vulnerabilities may allow remote attackers to gain the realm and to cause a denial of krb5 service. Solution: Please use the turbopkg (zabom) tool to apply the update. http://www.securityspace.com/smysecure/catid.html?in=TLSA-2003-29 Risk factor : High
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.