Test ID:	1.3.6.1.4.1.25623.1.1.4.2016.0994.1
Category:	SuSE Local Security Checks
Title:	SUSE: Security Advisory (SUSE-SU-2016:0994-1)
Summary:	The remote host is missing an update for the 'krb5' package(s) announced via the SUSE-SU-2016:0994-1 advisory.
Description:	Summary: The remote host is missing an update for the 'krb5' package(s) announced via the SUSE-SU-2016:0994-1 advisory. Vulnerability Insight: This update for krb5 fixes the following security issue: - CVE-2016-3119: An authenticated attacker with permission to modify a principal entry could have caused kadmind to dereference a null pointer by supplying an empty DB argument to the modify_principal command, if kadmind is configured to use the LDAP KDB module. (bsc#971942) Affected Software/OS: 'krb5' package(s) on SUSE Linux Enterprise Desktop 12, SUSE Linux Enterprise Desktop 12-SP1, SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 12-SP1, SUSE Linux Enterprise Server for SAP Applications 12, SUSE Linux Enterprise Server for SAP Applications 12-SP1. Solution: Please install the updated package(s). CVSS Score: 3.5 CVSS Vector: AV:N/AC:M/Au:S/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-3119 BugTraq ID: 85392 http://www.securityfocus.com/bid/85392 https://lists.debian.org/debian-lts-announce/2018/01/msg00040.html RedHat Security Advisories: RHSA-2016:2591 http://rhn.redhat.com/errata/RHSA-2016-2591.html http://www.securitytracker.com/id/1035399 SuSE Security Announcement: openSUSE-SU-2016:0947 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-04/msg00007.html SuSE Security Announcement: openSUSE-SU-2016:1072 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-04/msg00055.html
Copyright	Copyright (C) 2021 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.