Red Hat Security AdvisoryRHSA-2010:0926
krb5 security update
Released 2010-11-30 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) krb5-1.6.1-36.el5_5.6, krb5-devel-1.6.1-36.el5_5.6, krb5-devel-1.6.1-36.el5_5.6.i386 +14
- Red Hat Enterprise Linux AS version 4 krb5-1.3.4-62.el4_8.3, krb5-devel-1.3.4-62.el4_8.3, krb5-devel-1.3.4-62.el4_8.3.i386 +14
- Red Hat Enterprise Linux Desktop (v. 5 client) krb5-1.6.1-36.el5_5.6, krb5-libs-1.6.1-36.el5_5.6, krb5-libs-1.6.1-36.el5_5.6.i386 +2
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) krb5-1.6.1-36.el5_5.6, krb5-devel-1.6.1-36.el5_5.6, krb5-devel-1.6.1-36.el5_5.6.i386 +2
- Red Hat Enterprise Linux Desktop version 4 krb5-1.3.4-62.el4_8.3, krb5-devel-1.3.4-62.el4_8.3, krb5-devel-1.3.4-62.el4_8.3.i386 +6
- Red Hat Enterprise Linux ES version 4 krb5-1.3.4-62.el4_8.3, krb5-devel-1.3.4-62.el4_8.3, krb5-devel-1.3.4-62.el4_8.3.i386 +10
- Red Hat Enterprise Linux WS version 4 krb5-1.3.4-62.el4_8.3, krb5-devel-1.3.4-62.el4_8.3, krb5-devel-1.3.4-62.el4_8.3.i386 +10
Fixes 1 record
Priority LOW 23
MIT Kerberos 5 (aka krb5) 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x, and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to modify user-visible prompt text, modi…
CVSS 3.0LOW 3.7· Network · No auth · No interaction · EPSS 0.02847 · Published 2010-12-02 · Fixed CWE-310
