Test ID:	1.3.6.1.4.1.25623.1.0.70827
Category:	Ubuntu Local Security Checks
Title:	Ubuntu USN-1116-1 (krb5-admin-server)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to krb5-admin-server announced via advisory USN-1116-1. Details: Felipe Ortega discovered that kadmind did not correctly handle password changing error conditions. An unauthenticated remote attacker could exploit this to crash kadmind, leading to a denial of service. Solution: The problem can be corrected by updating your system to the following package versions: Ubuntu 10.10: krb5-admin-server 1.8.1+dfsg-5ubuntu0.7 Ubuntu 10.04 LTS: krb5-admin-server 1.8.1+dfsg-2ubuntu0.9 Ubuntu 9.10: krb5-admin-server 1.7dfsg~ beta3-1ubuntu0.13 http://www.securityspace.com/smysecure/catid.html?in=USN-1116-1 CVSS Score: 10.0 CVSS Vector: AV:L/AC:L/Au:NR/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-0285 BugTraq ID: 47310 http://www.securityfocus.com/bid/47310 Bugtraq: 20110413 MITKRB5-SA-2011-004 kadmind invalid pointer free() [CVE-2011-0285] (Google Search) http://www.securityfocus.com/archive/1/517484/100/0/threaded http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058181.html http://www.mandriva.com/security/advisories?name=MDVSA-2011:077 http://osvdb.org/71789 http://www.redhat.com/support/errata/RHSA-2011-0447.html http://www.securitytracker.com/id?1025320 http://secunia.com/advisories/44125 http://secunia.com/advisories/44181 http://secunia.com/advisories/44196 http://securityreason.com/securityalert/8200 SuSE Security Announcement: openSUSE-SU-2011:0348 (Google Search) https://hermes.opensuse.org/messages/8086843 http://www.vupen.com/english/advisories/2011/0936 http://www.vupen.com/english/advisories/2011/0986 http://www.vupen.com/english/advisories/2011/0997
Copyright	Copyright (c) 2012 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.