oval:org.mitre.oval:def:8181

Definition Id: oval:org.mitre.oval:def:8181

Oval ID:	oval:org.mitre.oval:def:8181
Title:	DSA-1766 krb5 -- several vulnerabilities
Description:	Several vulnerabilities have been found in the MIT reference implementation of Kerberos V5, a system for authenticating users and services on a network. The Common Vulnerabilities and Exposures project identified the following problems: The Apple Product Security team discovered that the SPNEGO GSS-API mechanism suffers of a missing bounds check when reading a network input buffer which results in an invalid read crashing the application or possibly leaking information. Under certain conditions the SPNEGO GSS-API mechanism references a null pointer which crashes the application using the library. An incorrect length check inside the ASN.1 decoder of the MIT krb5 implementation allows an unauthenticated remote attacker to crash of the kinit or KDC program. Under certain conditions the ASN.1 decoder of the MIT krb5 implementation frees an uninitialised pointer which could lead to denial of service and possibly arbitrary code execution.
Family:	unix	Class:	patch
Reference(s):	DSA-1766 CVE-2009-0844 CVE-2009-0845 CVE-2009-0847 CVE-2009-0846	Version:	3
Platform(s):	Debian GNU/Linux 5.0 Debian GNU/Linux 4.0	Product(s):	krb5
Definition Synopsis:
Release section Debian GNU/Linux 5.0 is installed AND Architecture section Architecture independent section Installed architecture is all AND krb5-doc is earlier than 1.6.dfsg.4~beta1-5lenny1 OR Architecture dependent section Supported architectures section Installed architecture is s390 AND Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is powerpc AND Installed architecture is i386 AND Installed architecture is armel AND Installed architecture is mips AND Installed architecture is ia64 AND Installed architecture is alpha AND Installed architecture is mipsel AND Installed architecture is hppa AND Packages section krb5-rsh-server is earlier than 1.6.dfsg.4~beta1-5lenny1 AND krb5-kdc-ldap is earlier than 1.6.dfsg.4~beta1-5lenny1 AND krb5-telnetd is earlier than 1.6.dfsg.4~beta1-5lenny1 AND libkrb5-dev is earlier than 1.6.dfsg.4~beta1-5lenny1 AND libkrb53 is earlier than 1.6.dfsg.4~beta1-5lenny1 AND krb5-ftpd is earlier than 1.6.dfsg.4~beta1-5lenny1 AND krb5-pkinit is earlier than 1.6.dfsg.4~beta1-5lenny1 AND libkadm55 is earlier than 1.6.dfsg.4~beta1-5lenny1 AND libkrb5-dbg is earlier than 1.6.dfsg.4~beta1-5lenny1 AND krb5-user is earlier than 1.6.dfsg.4~beta1-5lenny1 AND krb5-kdc is earlier than 1.6.dfsg.4~beta1-5lenny1 AND krb5-clients is earlier than 1.6.dfsg.4~beta1-5lenny1 AND krb5-admin-server is earlier than 1.6.dfsg.4~beta1-5lenny1 OR Release section Debian GNU/Linux 4.0 is installed. AND Architecture section Architecture independent section Installed architecture is all AND krb5-doc is earlier than 1.4.4-7etch7 AND krb5-rsh-server is earlier than 1.4.4-7etch7 AND krb5-telnetd is earlier than 1.4.4-7etch7 AND libkrb5-dev is earlier than 1.4.4-7etch7 AND libkrb53 is earlier than 1.4.4-7etch7 AND krb5-ftpd is earlier than 1.4.4-7etch7 AND krb5-admin-server is earlier than 1.4.4-7etch7 AND libkadm55 is earlier than 1.4.4-7etch7 AND libkrb5-dbg is earlier than 1.4.4-7etch7 AND krb5-user is earlier than 1.4.4-7etch7 AND krb5-clients is earlier than 1.4.4-7etch7 AND krb5-kdc is earlier than 1.4.4-7etch7

Definition Id: oval:org.mitre.oval:def:6513

Oval ID:	oval:org.mitre.oval:def:6513
Title:	Debian GNU/Linux 5.0 is installed
Description:	Debian GNU/Linux 5.0 (lenny) is installed
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:debian:debian_gnu/linux:5.0	Version:	7
Platform(s):	Debian GNU/Linux 5.0	Product(s):
Definition Synopsis:
Debian GNU/Linux 5.0 is installed
Referenced By:
oval:org.mitre.oval:def:8181

Definition Id: oval:org.mitre.oval:def:6461

Oval ID:	oval:org.mitre.oval:def:6461
Title:	Debian GNU/Linux 4.0 is installed.
Description:	Debian GNU/Linux 4.0 (etch) is installed
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:debian:debian_gnu/linux:4.0	Version:	9
Platform(s):	Debian GNU/Linux 4.0	Product(s):
Definition Synopsis:
Debian GNU/Linux 4.0 is installed
Referenced By:
oval:org.mitre.oval:def:8181

Copyright Security-Database 2006-2024 - Powered by themself ;) in 0.0335s

Facebook rss twitter linkedin mail