Red Hat Security AdvisoryRHSA-2013:0748
krb5 security update
Released 2013-04-16 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) krb5-1.10.3-10.el6_4.2, krb5-libs-1.10.3-10.el6_4.2, krb5-pkinit-openssl-1.10.3-10.el6_4.2 +1
- Red Hat Enterprise Linux Desktop Optional (v. 6) krb5-1.10.3-10.el6_4.2, krb5-devel-1.10.3-10.el6_4.2, krb5-server-1.10.3-10.el6_4.2 +1
- Red Hat Enterprise Linux HPC Node (v. 6) krb5-1.10.3-10.el6_4.2, krb5-libs-1.10.3-10.el6_4.2, krb5-pkinit-openssl-1.10.3-10.el6_4.2 +1
- Red Hat Enterprise Linux HPC Node Optional (v. 6) krb5-1.10.3-10.el6_4.2, krb5-devel-1.10.3-10.el6_4.2, krb5-server-1.10.3-10.el6_4.2 +1
- Red Hat Enterprise Linux Server (v. 6) krb5-1.10.3-10.el6_4.2, krb5-devel-1.10.3-10.el6_4.2, krb5-devel-1.10.3-10.el6_4.2.ppc +7
- Red Hat Enterprise Linux Workstation (v. 6) krb5-1.10.3-10.el6_4.2, krb5-devel-1.10.3-10.el6_4.2, krb5-libs-1.10.3-10.el6_4.2 +4
Fixes 1 record
Priority LOW 24
The prep_reprocess_req function in do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.10.5 does not properly perform service-principal realm referral, which allows remote authenticate…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.02921 · Published 2013-04-19 · Partial fix CWE-476
