Test ID:	1.3.6.1.4.1.25623.1.0.56302
Category:	Ubuntu Local Security Checks
Title:	Ubuntu USN-253-1 (heimdal)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to heimdal announced via advisory USN-253-1. A security issue affects the following Ubuntu releases: Ubuntu 4.10 (Warty Warthog) Ubuntu 5.04 (Hoary Hedgehog) Ubuntu 5.10 (Breezy Badger) The following packages are affected: heimdal-servers A remote Denial of Service vulnerability was discovered in the heimdal implementation of the telnet daemon. A remote attacker could force the server to crash due to a NULL de-reference before the user logged in, resulting in inetd turning telnetd off because it forked too fast. Please note that the heimdal-servers package is not officially supported in Ubuntu (it is in the 'universe' component of the archive). However, this affects you if you use a customized version built from the heimdal source package (which is supported). Solution: The problem can be corrected by upgrading the affected package to version 0.6.2-3ubuntu0.3 (for Ubuntu 4.10), 0.6.3-7ubuntu1.3 (for Ubuntu 5.04), or 0.6.3-11ubuntu1.2 (for Ubuntu 5.10). In general, a standard system upgrade is sufficient to effect the necessary changes. http://www.securityspace.com/smysecure/catid.html?in=USN-253-1 Risk factor : High CVSS Score: 7.8
Cross-Ref:	BugTraq ID: 16676 Common Vulnerability Exposure (CVE) ID: CVE-2006-0677 http://www.securityfocus.com/bid/16676 Debian Security Information: DSA-977 (Google Search) http://www.debian.org/security/2006/dsa-977 http://www.stacken.kth.se/lists/heimdal-discuss/2006-02/msg00028.html http://www.osvdb.org/23244 http://secunia.com/advisories/18894 http://secunia.com/advisories/18961 http://secunia.com/advisories/19005 http://securityreason.com/securityalert/449 SuSE Security Announcement: SUSE-SA:2006:011 (Google Search) http://www.securityfocus.com/archive/1/426043/100/0/threaded http://www.ubuntu.com/usn/usn-253-1 http://www.vupen.com/english/advisories/2006/0456 http://www.vupen.com/english/advisories/2006/0628 http://www.vupen.com/english/advisories/2006/0653 XForce ISS Database: heimdal-telnetd-dos(24763) https://exchange.xforce.ibmcloud.com/vulnerabilities/24763
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.