Red Hat Security Advisory

RHSA-2008:0860

ipa security update

Released 2008-09-10 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat IPA 1 for RHEL 5 Server ipa-1.0.0-23.el5ipa, ipa-admintools-1.0.0-23.el5ipa, ipa-admintools-1.0.0-23.el5ipa.i386 +8

Fixes 1 record

TI-2008-03136 CVE-2008-3274 · GHSA-8w34-c24h-wvp3

The default configuration of Red Hat Enterprise IPA 1.0.0 and FreeIPA before 1.1.1 places…

LOW 27

The default configuration of Red Hat Enterprise IPA 1.0.0 and FreeIPA before 1.1.1 places ldap:///anyone on the read ACL for the krbMKey attribute, which allows remote attackers to obtain the Kerberos master key via an a…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01843 Published 2008-09-12 Fixed CWE-200