Red Hat Security AdvisoryRHSA-2007:0095
krb5 security update
Released 2007-04-03 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 krb5-1.2.7-61, krb5-devel-1.2.7-61, krb5-devel-1.2.7-61.i386 +6
- Red Hat Enterprise Linux (v. 5 server) krb5-1.5-23, krb5-devel-1.5-23, krb5-devel-1.5-23.i386 +14
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 krb5-1.2.2-44, krb5-devel-1.2.2-44.i386, krb5-devel-1.2.2-44.ia64 +6
- Red Hat Enterprise Linux AS version 3 krb5-1.2.7-61, krb5-devel-1.2.7-61, krb5-devel-1.2.7-61.i386 +14
- Red Hat Enterprise Linux AS version 4 krb5-1.3.4-46, krb5-devel-1.3.4-46, krb5-devel-1.3.4-46.i386 +14
- Red Hat Enterprise Linux Desktop (v. 5 client) krb5-1.5-23, krb5-libs-1.5-23, krb5-libs-1.5-23.i386 +2
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) krb5-1.5-23, krb5-devel-1.5-23, krb5-devel-1.5-23.i386 +2
- Red Hat Enterprise Linux Desktop version 4 krb5-1.3.4-46, krb5-devel-1.3.4-46, krb5-devel-1.3.4-46.i386 +6
- Red Hat Enterprise Linux ES version 2.1 krb5-1.2.2-44, krb5-devel-1.2.2-44.i386, krb5-libs-1.2.2-44.i386 +2
- Red Hat Enterprise Linux ES version 3 krb5-1.2.7-61, krb5-devel-1.2.7-61, krb5-devel-1.2.7-61.i386 +10
- Red Hat Enterprise Linux ES version 4 krb5-1.3.4-46, krb5-devel-1.3.4-46, krb5-devel-1.3.4-46.i386 +10
- Red Hat Enterprise Linux WS version 2.1 krb5-1.2.2-44, krb5-devel-1.2.2-44.i386, krb5-libs-1.2.2-44.i386 +2
- Red Hat Enterprise Linux WS version 3 krb5-1.2.7-61, krb5-devel-1.2.7-61, krb5-devel-1.2.7-61.i386 +10
- Red Hat Enterprise Linux WS version 4 krb5-1.3.4-46, krb5-devel-1.3.4-46, krb5-devel-1.3.4-46.i386 +10
- Red Hat Linux Advanced Workstation 2.1 krb5-1.2.2-44, krb5-devel-1.2.2-44.ia64, krb5-libs-1.2.2-44.ia64 +2
Fixes 3 records
Priority HIGH 66
The telnet daemon (telnetd) in MIT krb5 before 1.6.1 allows remote attackers to bypass authentication and gain system access via a username beginning with a '-' character, a similar issue to CVE-2007-0882.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.30186 · Published 2007-04-06 · Fixed CWE-306
Priority MEDIUM 51
Double free vulnerability in the GSS-API library (lib/gssapi/krb5/k5unseal.c), as used by the Kerberos administration daemon (kadmind) in MIT krb5 before 1.6.1, when used with the authentication method provided by the RP…
CVSS 2.0HIGH 9.0· Network · Low privileges · Interaction — · EPSS 0.09949 · Published 2007-04-06 · Fixed CWE-415
Priority MEDIUM 51
Stack-based buffer overflow in the krb5_klog_syslog function in the kadm5 library, as used by the Kerberos administration daemon (kadmind) and Key Distribution Center (KDC), in MIT krb5 before 1.6.1 allows remote authent…
CVSS 2.0HIGH 9.0· Network · Low privileges · Interaction — · EPSS 0.10401 · Published 2007-04-06 · Fixed CWE-787
THREATIST.IORead the docs