Test ID:	1.3.6.1.4.1.25623.1.0.66638
Category:	Fedora Local Security Checks
Title:	Fedora Core 12 FEDORA-2009-13539 (krb5)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to krb5 announced via advisory FEDORA-2009-13539. Update Information: This update incorporates the upstream patches to fix CVE-2009-3295, a remotely- triggerable crash in the KDC. This update also addresses some packaging bugs, makes changes to the PAM support in ksu, and backports a change which allows GSSAPI acceptors to store delegated Kerberos credentials in credential caches when clients use SPNEGO. ChangeLog: * Mon Jan 4 2010 Nalin Dahyabhai - 1.7-15 - add upstream patch for KDC crash during referral processing (CVE-2009-3295), via Tom Yu (#545002) * Mon Dec 21 2009 Nalin Dahyabhai - 1.7-14 - refresh patch for #542868 from trunk * Thu Dec 10 2009 Nalin Dahyabhai - move man pages that live in the -libs subpackage into the regular %{_mandir} tree where they'll still be found if that package is the only one installed (#529319) References: [ 1 ] Bug #545002 - CVE-2009-3295 krb5: KDC denial of service in cross-realm referral processing (MITKRB5-SA-2009-003) https://bugzilla.redhat.com/show_bug.cgi?id=545002 Solution: Apply the appropriate updates. This update can be installed with the yum update program. Use su -c 'yum update krb5' at the command line. For more information, refer to Managing Software with yum, available at http://docs.fedoraproject.org/yum/. https://secure1.securityspace.com/smysecure/catid.html?in=FEDORA-2009-13539 Risk factor : Medium CVSS Score: 5.0
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-3295 BugTraq ID: 37486 http://www.securityfocus.com/bid/37486 Bugtraq: 20091228 MITKRB5-SA-2009-003 [CVE-2009-3295] KDC denial of service in cross-realm referral processing (Google Search) http://www.securityfocus.com/archive/1/508622/100/0/threaded http://securitytracker.com/id?1023392 http://secunia.com/advisories/37977 http://www.vupen.com/english/advisories/2009/3652
Copyright	Copyright (c) 2010 E-Soft Inc. http://www.securityspace.com

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.