oval:org.mitre.oval:def:8094

Definition Id: oval:org.mitre.oval:def:8094

Oval ID:	oval:org.mitre.oval:def:8094
Title:	DSA-1524 krb5 -- several vulnerabilities
Description:	Several remote vulnerabilities have been discovered in the kdc component of the krb5, a system for authenticating users and services on a network. The Common Vulnerabilities and Exposures project identifies the following problems: An unauthenticated remote attacker may cause a krb4-enabled KDC to crash, expose information, or execute arbitrary code. Successful exploitation of this vulnerability could compromise the Kerberos key database and host security on the KDC host. An unauthenticated remote attacker may cause a krb4-enabled KDC to expose information. It is theoretically possible for the exposed information to include secret key data on some platforms. An unauthenticated remote attacker can cause memory corruption in the kadmind process, which is likely to cause kadmind to crash, resulting in a denial of service. It is at least theoretically possible for such corruption to result in database corruption or arbitrary code execution, though we have no such exploit and are not aware of any such exploits in use in the wild. In versions of MIT Kerberos shipped by Debian, this bug can only be triggered in configurations that allow large numbers of open file descriptors in a process.
Family:	unix	Class:	patch
Reference(s):	DSA-1524 CVE-2008-0062 CVE-2008-0063 CVE-2008-0947	Version:	3
Platform(s):	Debian GNU/Linux 4.0 Debian GNU/Linux 3.1	Product(s):	krb5
Definition Synopsis:
Release section Debian GNU/Linux 4.0 is installed. AND Architecture section Architecture independent section Installed architecture is all AND krb5-doc is earlier than 1.4.4-7etch5 AND krb5-rsh-server is earlier than 1.4.4-7etch5 AND krb5-telnetd is earlier than 1.4.4-7etch5 AND libkrb5-dev is earlier than 1.4.4-7etch5 AND libkrb53 is earlier than 1.4.4-7etch5 AND krb5-ftpd is earlier than 1.4.4-7etch5 AND krb5-admin-server is earlier than 1.4.4-7etch5 AND libkadm55 is earlier than 1.4.4-7etch5 AND libkrb5-dbg is earlier than 1.4.4-7etch5 AND krb5-user is earlier than 1.4.4-7etch5 AND krb5-clients is earlier than 1.4.4-7etch5 AND krb5-kdc is earlier than 1.4.4-7etch5 OR Release section Debian GNU/Linux 3.1 is installed AND Architecture section Architecture independent section Installed architecture is all AND krb5-doc is earlier than 1.3.6-2sarge6 OR Architecture dependent section Supported architectures section Installed architecture is s390 AND Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is m68k AND Installed architecture is arm AND Installed architecture is i386 AND Installed architecture is ia64 AND Installed architecture is mips AND Installed architecture is powerpc AND Installed architecture is mipsel AND Installed architecture is hppa AND Packages section krb5-rsh-server is earlier than 1.3.6-2sarge6 AND krb5-telnetd is earlier than 1.3.6-2sarge6 AND libkrb53 is earlier than 1.3.6-2sarge6 AND libkrb5-dev is earlier than 1.3.6-2sarge6 AND krb5-ftpd is earlier than 1.3.6-2sarge6 AND libkadm55 is earlier than 1.3.6-2sarge6 AND krb5-user is earlier than 1.3.6-2sarge6 AND krb5-kdc is earlier than 1.3.6-2sarge6 AND krb5-clients is earlier than 1.3.6-2sarge6 AND krb5-admin-server is earlier than 1.3.6-2sarge6

Definition Id: oval:org.mitre.oval:def:6461

Oval ID:	oval:org.mitre.oval:def:6461
Title:	Debian GNU/Linux 4.0 is installed.
Description:	Debian GNU/Linux 4.0 (etch) is installed
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:debian:debian_gnu/linux:4.0	Version:	9
Platform(s):	Debian GNU/Linux 4.0	Product(s):
Definition Synopsis:
Debian GNU/Linux 4.0 is installed
Referenced By:
oval:org.mitre.oval:def:8094

Definition Id: oval:org.mitre.oval:def:7692

Oval ID:	oval:org.mitre.oval:def:7692
Title:	Debian GNU/Linux 3.1 is installed
Description:	Debian GNU/Linux 3.1 (sarge) is installed
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:debian:debian_gnu/linux:3.1	Version:	7
Platform(s):	Debian GNU/Linux 3.1	Product(s):
Definition Synopsis:
Debian GNU/Linux 3.1 is installed
Referenced By:
oval:org.mitre.oval:def:8094

Copyright Security-Database 2006-2024 - Powered by themself ;) in 0.0428s

Facebook rss twitter linkedin mail