ID de Prueba:	1.3.6.1.4.1.25623.1.0.54307
Categoría:	Trustix Local Security Checks
Título:	Trustix Security Advisory TSLSA-2004-0069 (kerberos5)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory TSLSA-2004-0069. There is a buffer overflow in the password history handling code of libkadm5srv which could be exploited by an authenticated user to execute arbitary code on a Key Distribution Center (KDC) server. This was reported by Michael Tautschnig. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2004-1189 to this issue. Solution: Update your system with the packages as indicated in the referenced security advisory. https://secure1.securityspace.com/smysecure/catid.html?in=TSLSA-2004-0069 Risk factor : High CVSS Score: 7.2
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2004-1189 http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html Bugtraq: 20041220 MITKRB5-SA-2004-004: heap overflow in libkadm5srv (Google Search) http://marc.info/?l=bugtraq&m=110358420909358&w=2 Bugtraq: 20050110 [USN-58-1] MIT Kerberos server vulnerability (Google Search) http://marc.info/?l=bugtraq&m=110548298407590&w=2 Conectiva Linux advisory: CLA-2005:917 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000917 http://www.mandriva.com/security/advisories?name=MDKSA-2004:156 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11911 http://www.redhat.com/support/errata/RHSA-2005-012.html http://www.redhat.com/support/errata/RHSA-2005-045.html http://www.trustix.org/errata/2004/0069 XForce ISS Database: kerberos-libkadm5srv-bo(18621) https://exchange.xforce.ibmcloud.com/vulnerabilities/18621
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.