Test ID:	1.3.6.1.4.1.25623.1.0.59796
Category:	Fedora Local Security Checks
Title:	Fedora Core 7 FEDORA-2007-2066 (krb5)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to krb5 announced via advisory FEDORA-2007-2066. The originally-used patch for CVE-2007-3999 didn't completely fix the bug. This update includes the revised patch. Solution: Apply the appropriate updates. This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at http://docs.fedoraproject.org/yum/. http://www.securityspace.com/smysecure/catid.html?in=FEDORA-2007-2066 Risk factor : Critical CVSS Score: 10.0
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-3999 http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html BugTraq ID: 25534 http://www.securityfocus.com/bid/25534 BugTraq ID: 26444 http://www.securityfocus.com/bid/26444 Bugtraq: 20070906 rPSA-2007-0179-1 krb5 krb5-server krb5-services krb5-test krb5-workstation (Google Search) http://www.securityfocus.com/archive/1/478748/100/0/threaded Bugtraq: 20070912 ZDI-07-052: Multiple Kerberos Implementations Authentication Context Stack Overflow Vulnerability (Google Search) http://www.securityfocus.com/archive/1/479251/100/0/threaded Cert/CC Advisory: TA07-319A http://www.us-cert.gov/cas/techalerts/TA07-319A.html CERT/CC vulnerability note: VU#883632 http://www.kb.cert.org/vuls/id/883632 Debian Security Information: DSA-1367 (Google Search) http://www.debian.org/security/2007/dsa-1367 Debian Security Information: DSA-1368 (Google Search) http://www.debian.org/security/2007/dsa-1368 https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00087.html https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00173.html http://www.gentoo.org/security/en/glsa/glsa-200709-01.xml http://security.gentoo.org/glsa/glsa-200710-01.xml http://www.mandriva.com/security/advisories?name=MDKSA-2007:174 http://www.mandriva.com/security/advisories?name=MDKSA-2007:181 http://www.zerodayinitiative.com/advisories/ZDI-07-052.html https://bugzilla.redhat.com/show_bug.cgi?id=250973 http://lists.rpath.com/pipermail/security-announce/2007-September/000237.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3162 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9379 http://www.redhat.com/support/errata/RHSA-2007-0858.html http://www.redhat.com/support/errata/RHSA-2007-0913.html http://www.redhat.com/support/errata/RHSA-2007-0951.html http://www.securitytracker.com/id?1018647 http://secunia.com/advisories/26676 http://secunia.com/advisories/26680 http://secunia.com/advisories/26684 http://secunia.com/advisories/26691 http://secunia.com/advisories/26697 http://secunia.com/advisories/26699 http://secunia.com/advisories/26700 http://secunia.com/advisories/26705 http://secunia.com/advisories/26713 http://secunia.com/advisories/26728 http://secunia.com/advisories/26783 http://secunia.com/advisories/26792 http://secunia.com/advisories/26822 http://secunia.com/advisories/26896 http://secunia.com/advisories/26987 http://secunia.com/advisories/27043 http://secunia.com/advisories/27081 http://secunia.com/advisories/27146 http://secunia.com/advisories/27643 http://secunia.com/advisories/27756 http://secunia.com/advisories/29247 http://secunia.com/advisories/29270 http://securityreason.com/securityalert/3092 http://sunsolve.sun.com/search/document.do?assetkey=1-26-103060-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-201319-1 SuSE Security Announcement: SUSE-SR:2007:019 (Google Search) http://www.novell.com/linux/security/advisories/2007_19_sr.html SuSE Security Announcement: SUSE-SR:2007:024 (Google Search) http://www.novell.com/linux/security/advisories/2007_24_sr.html http://www.trustix.org/errata/2007/0026/ http://www.ubuntu.com/usn/usn-511-1 http://www.vupen.com/english/advisories/2007/3051 http://www.vupen.com/english/advisories/2007/3052 http://www.vupen.com/english/advisories/2007/3060 http://www.vupen.com/english/advisories/2007/3868 http://www.vupen.com/english/advisories/2008/0803/references XForce ISS Database: kerberos-rpcsecgss-bo(36437) https://exchange.xforce.ibmcloud.com/vulnerabilities/36437 Common Vulnerability Exposure (CVE) ID: CVE-2007-4000 BugTraq ID: 25533 http://www.securityfocus.com/bid/25533 Bugtraq: 20070907 FLEA-2007-0050-1 krb5 krb5-workstation (Google Search) http://www.securityfocus.com/archive/1/478794/100/0/threaded CERT/CC vulnerability note: VU#377544 http://www.kb.cert.org/vuls/id/377544 https://bugzilla.redhat.com/show_bug.cgi?id=250976 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9278 XForce ISS Database: kerberos-modifypolicy-code-execution(36438) https://exchange.xforce.ibmcloud.com/vulnerabilities/36438 Common Vulnerability Exposure (CVE) ID: CVE-2007-2442 http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html BugTraq ID: 24655 http://www.securityfocus.com/bid/24655 BugTraq ID: 25159 http://www.securityfocus.com/bid/25159 Bugtraq: 20070626 MITKRB5-SA-2007-004: kadmind multiple RPC lib vulnerabilities (Google Search) http://www.securityfocus.com/archive/1/472288/100/0/threaded Bugtraq: 20070628 FLEA-2007-0029-1: krb5 krb5-workstation (Google Search) http://www.securityfocus.com/archive/1/472432/100/0/threaded Bugtraq: 20070629 TSLSA-2007-0021 - kerberos5 (Google Search) http://www.securityfocus.com/archive/1/472507/30/5970/threaded Cert/CC Advisory: TA07-177A http://www.us-cert.gov/cas/techalerts/TA07-177A.html CERT/CC vulnerability note: VU#356961 http://www.kb.cert.org/vuls/id/356961 Debian Security Information: DSA-1323 (Google Search) http://www.debian.org/security/2007/dsa-1323 http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html http://security.gentoo.org/glsa/glsa-200707-11.xml HPdes Security Advisory: HPSBUX02544 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02257427 HPdes Security Advisory: SSRT100107 http://www.mandriva.com/security/advisories?name=MDKSA-2007:137 http://osvdb.org/36596 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10631 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7344 http://www.redhat.com/support/errata/RHSA-2007-0384.html http://www.redhat.com/support/errata/RHSA-2007-0562.html http://www.securitytracker.com/id?1018293 http://secunia.com/advisories/25800 http://secunia.com/advisories/25801 http://secunia.com/advisories/25814 http://secunia.com/advisories/25821 http://secunia.com/advisories/25841 http://secunia.com/advisories/25870 http://secunia.com/advisories/25888 http://secunia.com/advisories/25890 http://secunia.com/advisories/25894 http://secunia.com/advisories/25911 http://secunia.com/advisories/26033 http://secunia.com/advisories/26228 http://secunia.com/advisories/26235 http://secunia.com/advisories/26909 http://secunia.com/advisories/27706 http://secunia.com/advisories/40346 SGI Security Advisory: 20070602-01-P ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc http://sunsolve.sun.com/search/document.do?assetkey=1-26-102914-1 SuSE Security Announcement: SUSE-SA:2007:038 (Google Search) http://www.novell.com/linux/security/advisories/2007_38_krb5.html http://www.trustix.org/errata/2007/0021/ http://www.ubuntu.com/usn/usn-477-1 http://www.vupen.com/english/advisories/2007/2337 http://www.vupen.com/english/advisories/2007/2354 http://www.vupen.com/english/advisories/2007/2491 http://www.vupen.com/english/advisories/2007/2732 http://www.vupen.com/english/advisories/2007/3229 http://www.vupen.com/english/advisories/2010/1574 XForce ISS Database: kerberos-gssrpcsvcauthgssapi-code-execution(35082) https://exchange.xforce.ibmcloud.com/vulnerabilities/35082 Common Vulnerability Exposure (CVE) ID: CVE-2007-2443 BugTraq ID: 24657 http://www.securityfocus.com/bid/24657 CERT/CC vulnerability note: VU#365313 http://www.kb.cert.org/vuls/id/365313 http://osvdb.org/36597 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11277 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7131 XForce ISS Database: kerberos-gssrpcsvcauthunix-bo(35085) https://exchange.xforce.ibmcloud.com/vulnerabilities/35085 Common Vulnerability Exposure (CVE) ID: CVE-2007-2798 BugTraq ID: 24653 http://www.securityfocus.com/bid/24653 Bugtraq: 20070626 MITKRB5-SA-2007-005: kadmind vulnerable to buffer overflow (Google Search) http://www.securityfocus.com/archive/1/472289/100/0/threaded CERT/CC vulnerability note: VU#554257 http://www.kb.cert.org/vuls/id/554257 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=548 http://osvdb.org/36595 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1726 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7550 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9996 http://www.securitytracker.com/id?1018295 http://secunia.com/advisories/25875 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102985-1 http://www.vupen.com/english/advisories/2007/2370 XForce ISS Database: kerberos-renameprincipal2svc-bo(35080) https://exchange.xforce.ibmcloud.com/vulnerabilities/35080 Common Vulnerability Exposure (CVE) ID: CVE-2007-0956 BugTraq ID: 23281 http://www.securityfocus.com/bid/23281 Bugtraq: 20070403 MITKRB5-SA-2007-001: telnetd allows login as arbitrary user [CVE-2007-0956] (Google Search) http://www.securityfocus.com/archive/1/464590/100/0/threaded Bugtraq: 20070404 rPSA-2007-0063-1 krb5 krb5-server krb5-services krb5-test krb5-workstation (Google Search) http://www.securityfocus.com/archive/1/464666/100/0/threaded Bugtraq: 20070405 FLEA-2007-0008-1: krb5 (Google Search) http://www.securityfocus.com/archive/1/464814/30/7170/threaded Cert/CC Advisory: TA07-093B http://www.us-cert.gov/cas/techalerts/TA07-093B.html CERT/CC vulnerability note: VU#220816 http://www.kb.cert.org/vuls/id/220816 Debian Security Information: DSA-1276 (Google Search) http://www.debian.org/security/2007/dsa-1276 http://security.gentoo.org/glsa/glsa-200704-02.xml http://www.mandriva.com/security/advisories?name=MDKSA-2007:077 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10046 http://www.redhat.com/support/errata/RHSA-2007-0095.html http://www.securitytracker.com/id?1017848 http://secunia.com/advisories/24706 http://secunia.com/advisories/24735 http://secunia.com/advisories/24736 http://secunia.com/advisories/24740 http://secunia.com/advisories/24750 http://secunia.com/advisories/24755 http://secunia.com/advisories/24757 http://secunia.com/advisories/24785 http://secunia.com/advisories/24786 http://secunia.com/advisories/24817 SGI Security Advisory: 20070401-01-P ftp://patches.sgi.com/support/free/security/advisories/20070401-01-P.asc http://sunsolve.sun.com/search/document.do?assetkey=1-26-102867-1 SuSE Security Announcement: SUSE-SA:2007:025 (Google Search) http://lists.suse.com/archive/suse-security-announce/2007-Apr/0001.html http://www.ubuntu.com/usn/usn-449-1 http://www.vupen.com/english/advisories/2007/1218 http://www.vupen.com/english/advisories/2007/1249 XForce ISS Database: kerberos-telnet-security-bypass(33414) https://exchange.xforce.ibmcloud.com/vulnerabilities/33414 Common Vulnerability Exposure (CVE) ID: CVE-2007-0957 http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html BugTraq ID: 23285 http://www.securityfocus.com/bid/23285 Bugtraq: 20070403 MITKRB5-SA-2007-002: KDC, kadmind stack overflow in krb5_klog_syslog [CVE-2007-0957] (Google Search) http://www.securityfocus.com/archive/1/464592/100/0/threaded Cert/CC Advisory: TA07-109A http://www.us-cert.gov/cas/techalerts/TA07-109A.html CERT/CC vulnerability note: VU#704024 http://www.kb.cert.org/vuls/id/704024 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10757 http://www.securitytracker.com/id?1017849 http://secunia.com/advisories/24798 http://secunia.com/advisories/24966 http://secunia.com/advisories/25464 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102930-1 http://www.vupen.com/english/advisories/2007/1250 http://www.vupen.com/english/advisories/2007/1470 http://www.vupen.com/english/advisories/2007/1983 XForce ISS Database: kerberos-krb5klogsyslog-bo(33411) https://exchange.xforce.ibmcloud.com/vulnerabilities/33411 Common Vulnerability Exposure (CVE) ID: CVE-2007-1216 BugTraq ID: 23282 http://www.securityfocus.com/bid/23282 Bugtraq: 20070403 MITKRB5-SA-2007-003: double-free vulnerability in kadmind (via GSS-API library) [CVE-2007-1216] (Google Search) http://www.securityfocus.com/archive/1/464591/100/0/threaded CERT/CC vulnerability note: VU#419344 http://www.kb.cert.org/vuls/id/419344 HPdes Security Advisory: HPSBUX02217 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056923 HPdes Security Advisory: SSRT071337 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11135 http://www.securitytracker.com/id?1017852 http://secunia.com/advisories/25388 http://www.vupen.com/english/advisories/2007/1916 XForce ISS Database: kerberos-kadmind-code-execution(33413) https://exchange.xforce.ibmcloud.com/vulnerabilities/33413 Common Vulnerability Exposure (CVE) ID: CVE-2007-4743 Debian Security Information: DSA-1387 (Google Search) http://www.debian.org/security/2007/dsa-1387 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10239 http://www.redhat.com/support/errata/RHSA-2007-0892.html http://www.ubuntu.com/usn/usn-511-2
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.