Test ID:	1.3.6.1.4.1.25623.1.0.70493
Category:	Red Hat Local Security Checks
Title:	RedHat Security Advisory RHSA-2011:1790
Summary:	NOSUMMARY
Description:	Description: The remote host is missing updates announced in advisory RHSA-2011:1790. Kerberos is a network authentication system which allows clients and servers to authenticate to each other using symmetric encryption and a trusted third-party, the Key Distribution Center (KDC). A NULL pointer dereference flaw was found in the way the MIT Kerberos KDC processed certain TGS (Ticket-granting Server) requests. A remote, authenticated attacker could use this flaw to crash the KDC via a specially-crafted TGS request. (CVE-2011-1530) Red Hat would like to thank the MIT Kerberos project for reporting this issue. All krb5 users should upgrade to these updated packages, which contain a backported patch to correct this issue. After installing the updated packages, the krb5kdc daemon will be restarted automatically. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2011-1790.html http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-007.txt Risk factor : Medium
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-1530 BugTraq ID: 50929 http://www.securityfocus.com/bid/50929 Bugtraq: 20111206 MITKRB5-SA-2011-007 KDC null pointer dereference in TGS handling [CVE-2011-1530] (Google Search) http://www.securityfocus.com/archive/1/520756/100/0/threaded http://www.mandriva.com/security/advisories?name=MDVSA-2011:184 http://www.redhat.com/support/errata/RHSA-2011-1790.html http://securitytracker.com/id?1026374 http://secunia.com/advisories/47124 XForce ISS Database: kerberos-processtgsreq-dos(71655) https://exchange.xforce.ibmcloud.com/vulnerabilities/71655
Copyright	Copyright (c) 2012 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.