Executive Summary

Summary
Title MIT Kerberos 5: Multiple vulnerabilities
Informations
Name GLSA-201312-12 First vendor Publication 2013-12-16
Vendor Gentoo Last vendor Modification 2013-12-16
Severity (Vendor) Normal Revision N/A

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Cvss Base Score 9.3 Attack Range Network
Cvss Impact Score 10 Attack Complexity Medium
Cvss Expoit Score 8.6 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Synopsis

Multiple vulnerabilities have been discovered in MIT Kerberos 5, allowing execution of arbitrary code or Denial of Service.

Background

MIT Kerberos 5 is a suite of applications that implement the Kerberos network protocol.

Description

Multiple vulnerabilities have been discovered in the Key Distribution Center in MIT Kerberos 5. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could send a specially crafted request, possibly resulting in execution of arbitrary code with the privileges of the process or a Denial of Service condition. Additionally, a remote attacker could impersonate a kadmind server and send a specially crafted packet to the password change port, which can result in a ping-pong condition and a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All MIT Kerberos 5 users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=app-crypt/mit-krb5-1.11.4"

References

[ 1 ] CVE-2002-2443 : http://nvd.nist.gov/nvd.cfm?cvename=CVE-2002-2443
[ 2 ] CVE-2012-1014 : http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-1014
[ 3 ] CVE-2012-1015 : http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-1015
[ 4 ] CVE-2013-1416 : http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1416
[ 5 ] CVE-2013-1417 : http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1417
[ 6 ] CVE-2013-1418 : http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1418
[ 7 ] CVE-2013-6800 : http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-6800

Availability

This GLSA and any updates to it are available for viewing at the Gentoo Security Website:

http://security.gentoo.org/glsa/glsa-201312-12.xml

Original Source

Url : http://security.gentoo.org/glsa/glsa-201312-12.xml

CWE : Common Weakness Enumeration

% Id Name
60 % CWE-20 Improper Input Validation
40 % CWE-476 NULL Pointer Dereference

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:18463
 
Oval ID: oval:org.mitre.oval:def:18463
Title: DSA-2701-1 krb5 - denial of service
Description: It was discovered that the kpasswd service running on UDP port 464 could respond to response packets, creating a packet loop and a denial of service condition.
Family: unix Class: patch
Reference(s): DSA-2701-1
CVE-2002-2443
 Version: 8
Platform(s): Debian GNU/Linux 6.0
Debian GNU/Linux 7
Debian GNU/kFreeBSD 6.0
Debian GNU/kFreeBSD 7
 Product(s): krb5
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:20176
 
Oval ID: oval:org.mitre.oval:def:20176
Title: DSA-2518-1 krb5 - denial of service
Description: Emmanuel Bouillon from NCI Agency discovered multiple vulnerabilities in MIT Kerberos, a daemon implementing the network authentication protocol.
Family: unix Class: patch
Reference(s): DSA-2518-1
CVE-2012-1014
CVE-2012-1015
 Version: 5
Platform(s): Debian GNU/Linux 6.0
Debian GNU/kFreeBSD 6.0
 Product(s): krb5
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:21099
 
Oval ID: oval:org.mitre.oval:def:21099
Title: RHSA-2013:0748: krb5 security update (Moderate)
Description: The prep_reprocess_req function in do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.10.5 does not properly perform service-principal realm referral, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted TGS-REQ request.
Family: unix Class: patch
Reference(s): RHSA-2013:0748-01
CESA-2013:0748
CVE-2013-1416
 Version: 4
Platform(s): Red Hat Enterprise Linux 6
CentOS Linux 6
 Product(s): krb5
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:21141
 
Oval ID: oval:org.mitre.oval:def:21141
Title: RHSA-2013:0942: krb5 security update (Moderate)
Description: schpw.c in the kpasswd service in kadmind in MIT Kerberos 5 (aka krb5) before 1.11.3 does not properly validate UDP packets before sending responses, which allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged packet that triggers a communication loop, as demonstrated by krb_pingpong.nasl, a related issue to CVE-1999-0103.
Family: unix Class: patch
Reference(s): RHSA-2013:0942-01
CESA-2013:0942
CVE-2002-2443
 Version: 4
Platform(s): Red Hat Enterprise Linux 6
Red Hat Enterprise Linux 5
CentOS Linux 5
CentOS Linux 6
 Product(s): krb5
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:21369
 
Oval ID: oval:org.mitre.oval:def:21369
Title: RHSA-2012:1131: krb5 security update (Important)
Description: The kdc_handle_protected_negotiation function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8.x, 1.9.x before 1.9.5, and 1.10.x before 1.10.3 attempts to calculate a checksum before verifying that the key type is appropriate for a checksum, which allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized pointer free, heap memory corruption, and daemon crash) via a crafted AS-REQ request.
Family: unix Class: patch
Reference(s): RHSA-2012:1131-01
CESA-2012:1131
CVE-2012-1013
CVE-2012-1015
 Version: 29
Platform(s): Red Hat Enterprise Linux 6
CentOS Linux 6
 Product(s): krb5
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:23478
 
Oval ID: oval:org.mitre.oval:def:23478
Title: DEPRECATED: ELSA-2013:0942: krb5 security update (Moderate)
Description: schpw.c in the kpasswd service in kadmind in MIT Kerberos 5 (aka krb5) before 1.11.3 does not properly validate UDP packets before sending responses, which allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged packet that triggers a communication loop, as demonstrated by krb_pingpong.nasl, a related issue to CVE-1999-0103.
Family: unix Class: patch
Reference(s): ELSA-2013:0942-01
CVE-2002-2443
 Version: 7
Platform(s): Oracle Linux 6
Oracle Linux 5
 Product(s): krb5
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:23920
 
Oval ID: oval:org.mitre.oval:def:23920
Title: ELSA-2013:0942: krb5 security update (Moderate)
Description: schpw.c in the kpasswd service in kadmind in MIT Kerberos 5 (aka krb5) before 1.11.3 does not properly validate UDP packets before sending responses, which allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged packet that triggers a communication loop, as demonstrated by krb_pingpong.nasl, a related issue to CVE-1999-0103.
Family: unix Class: patch
Reference(s): ELSA-2013:0942-01
CVE-2002-2443
 Version: 6
Platform(s): Oracle Linux 6
Oracle Linux 5
 Product(s): krb5
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:23941
 
Oval ID: oval:org.mitre.oval:def:23941
Title: ELSA-2012:1131: krb5 security update (Important)
Description: The kdc_handle_protected_negotiation function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8.x, 1.9.x before 1.9.5, and 1.10.x before 1.10.3 attempts to calculate a checksum before verifying that the key type is appropriate for a checksum, which allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized pointer free, heap memory corruption, and daemon crash) via a crafted AS-REQ request.
Family: unix Class: patch
Reference(s): ELSA-2012:1131-01
CVE-2012-1013
CVE-2012-1015
 Version: 13
Platform(s): Oracle Linux 6
 Product(s): krb5
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:24122
 
Oval ID: oval:org.mitre.oval:def:24122
Title: ELSA-2013:0748: krb5 security update (Moderate)
Description: The prep_reprocess_req function in do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.10.5 does not properly perform service-principal realm referral, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted TGS-REQ request.
Family: unix Class: patch
Reference(s): ELSA-2013:0748-01
CVE-2013-1416
 Version: 6
Platform(s): Oracle Linux 6
 Product(s): krb5
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:25702
 
Oval ID: oval:org.mitre.oval:def:25702
Title: SUSE-SU-2013:1875-1 -- Security update for krb5
Description: This update for krb5 fixes the following security issue: * If a KDC serves multiple realms, certain requests could cause setup_server_realm() to dereference a null pointer, crashing the KDC. (CVE-2013-1418) Security Issues: * CVE-2013-1418 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1418 >
Family: unix Class: patch
Reference(s): SUSE-SU-2013:1875-1
CVE-2013-1418
 Version: 3
Platform(s): SUSE Linux Enterprise Server 11
SUSE Linux Enterprise Desktop 11
 Product(s): krb5
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:25824
 
Oval ID: oval:org.mitre.oval:def:25824
Title: SUSE-SU-2013:1190-1 -- Security update for krb5
Description: This krb5 update fixes a security issue. * kpasswd UDP ping-pong (bug#825985 / CVE-2002-2443) Security Issue reference: * CVE-2002-2443 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-2443 >
Family: unix Class: patch
Reference(s): SUSE-SU-2013:1190-1
CVE-2002-2443
 Version: 3
Platform(s): SUSE Linux Enterprise Server 11
SUSE Linux Enterprise Server 10
SUSE Linux Enterprise Desktop 11
SUSE Linux Enterprise Desktop 10
 Product(s): krb5
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:26536
 
Oval ID: oval:org.mitre.oval:def:26536
Title: ELSA-2014-1245 -- krb5 security and bug fix update (Moderate)
Description: Kerberos is an authentication system which allows clients and services to authenticate to each other with the help of a trusted third party, a Kerberos Key Distribution Center (KDC). It was found that if a KDC served multiple realms, certain requests could cause the setup_server_realm() function to dereference a NULL pointer. A remote, unauthenticated attacker could use this flaw to crash the KDC using a specially crafted request. (CVE-2013-1418, CVE-2013-6800) A NULL pointer dereference flaw was found in the MIT Kerberos SPNEGO acceptor for continuation tokens. A remote, unauthenticated attacker could use this flaw to crash a GSSAPI-enabled server application. (CVE-2014-4344) A buffer over-read flaw was found in the way MIT Kerberos handled certain requests. A man-in-the-middle attacker with a valid Kerberos ticket who is able to inject packets into a client or server application&#39;s GSSAPI session could use this flaw to crash the application. (CVE-2014-4341) This update also fixes the following bugs: * Prior to this update, the libkrb5 library occasionally attempted to free already freed memory when encrypting credentials. As a consequence, the calling process terminated unexpectedly with a segmentation fault. With this update, libkrb5 frees memory correctly, which allows the credentials to be encrypted appropriately and thus prevents the mentioned crash. (BZ#1004632) * Previously, when the krb5 client library was waiting for a response from a server, the timeout variable in certain cases became a negative number. Consequently, the client could enter a loop while checking for responses. With this update, the client logic has been modified and the described error no longer occurs. (BZ#1089732) All krb5 users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. After installing the updated packages, the krb5kdc daemon will be restarted automatically.
Family: unix Class: patch
Reference(s): ELSA-2014-1245
CVE-2014-4344
CVE-2014-4341
CVE-2013-1418
CVE-2013-6800
 Version: 3
Platform(s): Oracle Linux 5
 Product(s): krb5
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:27301
 
Oval ID: oval:org.mitre.oval:def:27301
Title: DEPRECATED: ELSA-2012-1131 -- krb5 security update (important)
Description: [1.9-33.2] - pull up the patch to correct a possible NULL pointer dereference in kadmind (CVE-2012-1013, #827517) [1.9-33.1] - add candidate patch from upstream to fix freeing uninitialized pointer in the KDC (MITKRB5-SA-2012-001, CVE-2012-1015, #839859)
Family: unix Class: patch
Reference(s): ELSA-2012-1131
CVE-2012-1013
CVE-2012-1015
 Version: 4
Platform(s): Oracle Linux 6
 Product(s): krb5
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:27468
 
Oval ID: oval:org.mitre.oval:def:27468
Title: DEPRECATED: ELSA-2013-0748 -- krb5 security update (moderate)
Description: [1.10.3-10.2] - incorporate upstream patch to fix a NULL pointer dereference while processing certain TGS requests (CVE-2013-1416, #950342)
Family: unix Class: patch
Reference(s): ELSA-2013-0748
CVE-2013-1416
 Version: 4
Platform(s): Oracle Linux 6
 Product(s): krb5
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:27603
 
Oval ID: oval:org.mitre.oval:def:27603
Title: DEPRECATED: ELSA-2013-0942 -- krb5 security update (moderate)
Description: [1.10.3-10.3] - pull up fix for UDP ping-pong flaw in kpasswd service (CVE-2002-2443,
Family: unix Class: patch
Reference(s): ELSA-2013-0942
CVE-2002-2443
 Version: 4
Platform(s): Oracle Linux 5
Oracle Linux 6
 Product(s): krb5
Definition Synopsis:

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 3
Application 62
Os 4
Os 3
Os 3
Os 5
Os 2
Os 2
Os 2
Os 1
Os 2

OpenVAS Exploits

Date Description
2012-08-30 Name : Fedora Update for krb5 FEDORA-2012-11388
File : nvt/gb_fedora_2012_11388_krb5_fc17.nasl
2012-08-14 Name : Fedora Update for krb5 FEDORA-2012-11370
File : nvt/gb_fedora_2012_11370_krb5_fc16.nasl
2012-08-10 Name : Debian Security Advisory DSA 2518-1 (krb5)
File : nvt/deb_2518_1.nasl
2012-08-03 Name : CentOS Update for krb5-devel CESA-2012:1131 centos6
File : nvt/gb_CESA-2012_1131_krb5-devel_centos6.nasl
2012-08-03 Name : RedHat Update for krb5 RHSA-2012:1131-01
File : nvt/gb_RHSA-2012_1131-01_krb5.nasl
2012-08-03 Name : Mandriva Update for krb5 MDVSA-2012:120 (krb5)
File : nvt/gb_mandriva_MDVSA_2012_120.nasl
2012-08-03 Name : Ubuntu Update for krb5 USN-1520-1
File : nvt/gb_ubuntu_USN_1520_1.nasl

Information Assurance Vulnerability Management (IAVM)

Date Description
2013-11-14 IAVM : 2013-B-0130 - MIT Kerberos Denial of Service Vulnerabilities
Severity : Category I - VMSKEY : V0042308
2013-05-09 IAVM : 2013-B-0044 - MIT Kerberos Denial of Service Vulnerabilities
Severity : Category I - VMSKEY : V0037773

Snort® IPS/IDS

Date Description
2015-03-27 MIT Kerberos KDC as-req sname null pointer dereference attempt
RuleID : 8888889 - Revision : 1 - Type : SERVER-OTHER
2015-03-27 MIT Kerberos KDC as-req sname null pointer dereference attempt
RuleID : 8888888 - Revision : 1 - Type : SERVER-OTHER
2019-09-24 MIT Kerberos kpasswd UDP denial of service attempt
RuleID : 51212 - Revision : 1 - Type : SERVER-OTHER
2015-06-23 MIT Kerberos KDC as-req sname null pointer dereference attempt
RuleID : 34972 - Revision : 2 - Type : SERVER-OTHER
2015-06-23 MIT Kerberos KDC as-req sname null pointer dereference attempt
RuleID : 34971 - Revision : 2 - Type : SERVER-OTHER
2014-01-10 MIT Kerberos KDC prep_reprocess_req null pointer dereference attempt
RuleID : 27906 - Revision : 3 - Type : SERVER-OTHER

Nessus® Vulnerability Scanner

Date Description
2018-02-01 Name : The remote Debian host is missing a security update.
File : debian_DLA-1265.nasl - Type : ACT_GATHER_INFO
2015-11-13 Name : The remote Ubuntu host is missing one or more security-related patches.
File : ubuntu_USN-2810-1.nasl - Type : ACT_GATHER_INFO
2015-01-19 Name : The remote Solaris system is missing a security patch for third-party software.
File : solaris11_kerberos_20140219.nasl - Type : ACT_GATHER_INFO
2015-01-19 Name : The remote Solaris system is missing a security patch for third-party software.
File : solaris11_kerberos_20130924.nasl - Type : ACT_GATHER_INFO
2015-01-19 Name : The remote Solaris system is missing a security patch for third-party software.
File : solaris11_kerberos_20130716.nasl - Type : ACT_GATHER_INFO
2014-11-26 Name : The remote OracleVM host is missing a security update.
File : oraclevm_OVMSA-2014-0034.nasl - Type : ACT_GATHER_INFO
2014-11-18 Name : The remote Amazon Linux AMI host is missing a security update.
File : ala_ALAS-2014-443.nasl - Type : ACT_GATHER_INFO
2014-11-12 Name : The remote CentOS host is missing one or more security updates.
File : centos_RHSA-2014-1389.nasl - Type : ACT_GATHER_INFO
2014-11-08 Name : The remote Red Hat host is missing a security update.
File : redhat-RHSA-2013-1076.nasl - Type : ACT_GATHER_INFO
2014-11-08 Name : The remote Red Hat host is missing a security update.
File : redhat-RHSA-2012-1200.nasl - Type : ACT_GATHER_INFO
2014-10-17 Name : The remote Oracle Linux host is missing one or more security updates.
File : oraclelinux_ELSA-2014-1389.nasl - Type : ACT_GATHER_INFO
2014-10-14 Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2014-1389.nasl - Type : ACT_GATHER_INFO
2014-10-01 Name : The remote CentOS host is missing one or more security updates.
File : centos_RHSA-2014-1245.nasl - Type : ACT_GATHER_INFO
2014-09-18 Name : The remote Oracle Linux host is missing one or more security updates.
File : oraclelinux_ELSA-2014-1245.nasl - Type : ACT_GATHER_INFO
2014-09-16 Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2014-1245.nasl - Type : ACT_GATHER_INFO
2014-08-12 Name : The remote Ubuntu host is missing one or more security-related patches.
File : ubuntu_USN-2310-1.nasl - Type : ACT_GATHER_INFO
2014-06-13 Name : The remote openSUSE host is missing a security update.
File : openSUSE-2012-497.nasl - Type : ACT_GATHER_INFO
2014-06-13 Name : The remote openSUSE host is missing a security update.
File : openSUSE-2013-401.nasl - Type : ACT_GATHER_INFO
2014-06-13 Name : The remote openSUSE host is missing a security update.
File : openSUSE-2013-546.nasl - Type : ACT_GATHER_INFO
2014-06-13 Name : The remote openSUSE host is missing a security update.
File : openSUSE-2013-880.nasl - Type : ACT_GATHER_INFO
2014-06-13 Name : The remote openSUSE host is missing a security update.
File : openSUSE-2013-941.nasl - Type : ACT_GATHER_INFO
2013-12-17 Name : The remote Gentoo host is missing one or more security-related patches.
File : gentoo_GLSA-201312-12.nasl - Type : ACT_GATHER_INFO
2013-12-04 Name : The remote Fedora host is missing a security update.
File : fedora_2013-21786.nasl - Type : ACT_GATHER_INFO
2013-11-22 Name : The remote Mandriva Linux host is missing one or more security updates.
File : mandriva_MDVSA-2013-275.nasl - Type : ACT_GATHER_INFO
2013-11-19 Name : The remote Fedora host is missing a security update.
File : fedora_2013-21456.nasl - Type : ACT_GATHER_INFO
2013-11-18 Name : A single sign-on service is affected by a denial of service vulnerability.
File : mit_kerberos_cve-2013-1418.nasl - Type : ACT_DESTRUCTIVE_ATTACK
2013-11-12 Name : The remote Fedora host is missing a security update.
File : fedora_2013-20687.nasl - Type : ACT_GATHER_INFO
2013-09-04 Name : The remote Amazon Linux AMI host is missing a security update.
File : ala_ALAS-2013-182.nasl - Type : ACT_GATHER_INFO
2013-09-04 Name : The remote Amazon Linux AMI host is missing a security update.
File : ala_ALAS-2012-114.nasl - Type : ACT_GATHER_INFO
2013-09-04 Name : The remote Amazon Linux AMI host is missing a security update.
File : ala_ALAS-2013-208.nasl - Type : ACT_GATHER_INFO
2013-07-14 Name : The remote SuSE 10 host is missing a security-related patch.
File : suse_krb5-8631.nasl - Type : ACT_GATHER_INFO
2013-07-14 Name : The remote SuSE 11 host is missing one or more security updates.
File : suse_11_krb5-130626.nasl - Type : ACT_GATHER_INFO
2013-07-12 Name : The remote Oracle Linux host is missing one or more security updates.
File : oraclelinux_ELSA-2013-0942.nasl - Type : ACT_GATHER_INFO
2013-07-12 Name : The remote Oracle Linux host is missing one or more security updates.
File : oraclelinux_ELSA-2012-1131.nasl - Type : ACT_GATHER_INFO
2013-07-12 Name : The remote Oracle Linux host is missing one or more security updates.
File : oraclelinux_ELSA-2013-0748.nasl - Type : ACT_GATHER_INFO
2013-06-29 Name : The remote CentOS host is missing one or more security updates.
File : centos_RHSA-2012-1131.nasl - Type : ACT_GATHER_INFO
2013-06-14 Name : The remote Scientific Linux host is missing one or more security updates.
File : sl_20130612_krb5_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2013-06-14 Name : The remote CentOS host is missing one or more security updates.
File : centos_RHSA-2013-0942.nasl - Type : ACT_GATHER_INFO
2013-06-13 Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2013-0942.nasl - Type : ACT_GATHER_INFO
2013-06-04 Name : The remote FreeBSD host is missing a security-related update.
File : freebsd_pkg_e3f64457cccd11e2af76206a8a720317.nasl - Type : ACT_GATHER_INFO
2013-06-03 Name : The remote Debian host is missing a security-related update.
File : debian_DSA-2701.nasl - Type : ACT_GATHER_INFO
2013-05-26 Name : The remote Fedora host is missing a security update.
File : fedora_2013-8113.nasl - Type : ACT_GATHER_INFO
2013-05-24 Name : The remote Fedora host is missing a security update.
File : fedora_2013-8219.nasl - Type : ACT_GATHER_INFO
2013-05-22 Name : The remote Mandriva Linux host is missing one or more security updates.
File : mandriva_MDVSA-2013-166.nasl - Type : ACT_GATHER_INFO
2013-05-22 Name : The remote Fedora host is missing a security update.
File : fedora_2013-8212.nasl - Type : ACT_GATHER_INFO
2013-05-01 Name : The remote Mandriva Linux host is missing one or more security updates.
File : mandriva_MDVSA-2013-158.nasl - Type : ACT_GATHER_INFO
2013-04-20 Name : The remote Mandriva Linux host is missing one or more security updates.
File : mandriva_MDVSA-2013-042.nasl - Type : ACT_GATHER_INFO
2013-04-18 Name : The remote CentOS host is missing one or more security updates.
File : centos_RHSA-2013-0748.nasl - Type : ACT_GATHER_INFO
2013-04-18 Name : The remote Fedora host is missing a security update.
File : fedora_2013-5286.nasl - Type : ACT_GATHER_INFO
2013-04-18 Name : The remote Fedora host is missing a security update.
File : fedora_2013-5280.nasl - Type : ACT_GATHER_INFO
2013-04-17 Name : The remote Scientific Linux host is missing one or more security updates.
File : sl_20130416_krb5_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2013-04-17 Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2013-0748.nasl - Type : ACT_GATHER_INFO
2012-09-06 Name : The remote Mandriva Linux host is missing one or more security updates.
File : mandriva_MDVSA-2012-120.nasl - Type : ACT_GATHER_INFO
2012-08-10 Name : The remote Fedora host is missing a security update.
File : fedora_2012-11370.nasl - Type : ACT_GATHER_INFO
2012-08-06 Name : The remote Fedora host is missing a security update.
File : fedora_2012-11388.nasl - Type : ACT_GATHER_INFO
2012-08-03 Name : The remote Scientific Linux host is missing one or more security updates.
File : sl_20120731_krb5_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2012-08-01 Name : The remote Debian host is missing a security-related update.
File : debian_DSA-2518.nasl - Type : ACT_GATHER_INFO
2012-08-01 Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2012-1131.nasl - Type : ACT_GATHER_INFO
2012-08-01 Name : The remote Ubuntu host is missing one or more security-related patches.
File : ubuntu_USN-1520-1.nasl - Type : ACT_GATHER_INFO
2001-03-25 Name : The remote service is vulnerable to a denial of service attack.
File : krb_pingpong.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.
0
1
Date Informations
2014-02-17 11:37:59
  • Multiple Updates
2013-12-16 21:18:32
  • First insertion