Test ID:	1.3.6.1.4.1.25623.1.0.55081
Category:	Conectiva Local Security Checks
Title:	Conectiva Security Advisory CLSA-2005:993 (krb5)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing updates announced in advisory CLSA-2005:993. MIT Kerberos 5 (krb5) 1.3 through 1.4.1 Key Distribution Center (KDC) allows[2] remote attackers to cause a denial of service (application crash) via a certain valid TCP connection that causes a free of unallocated memory. Also, a heap-based buffer overflow in the Key Distribution Center (KDC) in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows[2] remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a certain valid TCP or UDP request. Finally, a double-free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to execute arbitrary code via certain error conditions. Solution: The apt tool can be used to perform RPM package upgrades by running 'apt-get update' followed by 'apt-get upgrade' http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000993 http://web.mit.edu/Kerberos/www/index.html http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2005-002-kdc.txt http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2005-003-recvauth.txt Risk factor : High
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.