ID de Prueba:	1.3.6.1.4.1.25623.1.0.50635
Categoría:	Mandrake Local Security Checks
Título:	Mandrake Security Advisory MDKSA-2004:156 (krb5)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to krb5 announced via advisory MDKSA-2004:156. Michael Tautschnig discovered a heap buffer overflow in the history handling code of libkadm5srv which could be exploited by an authenticated user to execute arbitrary code on a Key Distribution Center (KDC) server. The updated packages have been patched to prevent this problem. Affected versions: 10.0, 10.1, 9.2, Corporate Server 2.1 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. https://secure1.securityspace.com/smysecure/catid.html?in=MDKSA-2004:156 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1189 http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2004-004-pwhist.txt Risk factor : High CVSS Score: 7.2
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2004-1189 http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html Bugtraq: 20041220 MITKRB5-SA-2004-004: heap overflow in libkadm5srv (Google Search) http://marc.info/?l=bugtraq&m=110358420909358&w=2 Bugtraq: 20050110 [USN-58-1] MIT Kerberos server vulnerability (Google Search) http://marc.info/?l=bugtraq&m=110548298407590&w=2 Conectiva Linux advisory: CLA-2005:917 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000917 http://www.mandriva.com/security/advisories?name=MDKSA-2004:156 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11911 http://www.redhat.com/support/errata/RHSA-2005-012.html http://www.redhat.com/support/errata/RHSA-2005-045.html http://www.trustix.org/errata/2004/0069 XForce ISS Database: kerberos-libkadm5srv-bo(18621) https://exchange.xforce.ibmcloud.com/vulnerabilities/18621
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.