BDU:2015-01355

Опубликовано: 01 янв. 2015

Источник: fstec

CVSS2: 5

EPSS Низкий

Описание

Множественные уязвимости пакета libcomerr1-heimdal операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению целостности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Вендор

Сообщество свободного программного обеспечения

Наименование ПО

Debian GNU/Linux

Версия ПО

до 3.0 (Debian GNU/Linux)

Тип ПО

Операционная система

Операционные системы и аппаратные платформы

Уровень опасности уязвимости

Средний уровень опасности (базовая оценка CVSS 2.0 составляет 5)

Возможные меры по устранению уязвимости

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:

Debian GNU/Linux 3.0:

ppc:

heimdal-clients - 0.4e-7.woody.10

heimdal-clients-x - 0.4e-7.woody.10

heimdal-dev - 0.4e-7.woody.10

heimdal-kdc - 0.4e-7.woody.10

heimdal-servers - 0.4e-7.woody.10

heimdal-servers-x - 0.4e-7.woody.10

libasn1-5-heimdal - 0.4e-7.woody.10

libcomerr1-heimdal - 0.4e-7.woody.10

libgssapi1-heimdal - 0.4e-7.woody.10

libhdb7-heimdal - 0.4e-7.woody.10

libkadm5clnt4-heimdal - 0.4e-7.woody.10

libkadm5srv7-heimdal - 0.4e-7.woody.10

libkafs0-heimdal - 0.4e-7.woody.10

libkrb5-17-heimdal - 0.4e-7.woody.10

libotp0-heimdal - 0.4e-7.woody.10

libroken9-heimdal - 0.4e-7.woody.10

libsl0-heimdal - 0.4e-7.woody.10

libss0-heimdal - 0.4e-7.woody.10

s390x:

heimdal-clients - 0.4e-7.woody.10

heimdal-clients-x - 0.4e-7.woody.10

heimdal-dev - 0.4e-7.woody.10

heimdal-kdc - 0.4e-7.woody.10

heimdal-servers - 0.4e-7.woody.10

heimdal-servers-x - 0.4e-7.woody.10

libasn1-5-heimdal - 0.4e-7.woody.10

libcomerr1-heimdal - 0.4e-7.woody.10

libgssapi1-heimdal - 0.4e-7.woody.10

libhdb7-heimdal - 0.4e-7.woody.10

libkadm5clnt4-heimdal - 0.4e-7.woody.10

libkadm5srv7-heimdal - 0.4e-7.woody.10

libkafs0-heimdal - 0.4e-7.woody.10

libkrb5-17-heimdal - 0.4e-7.woody.10

libotp0-heimdal - 0.4e-7.woody.10

libroken9-heimdal - 0.4e-7.woody.10

libsl0-heimdal - 0.4e-7.woody.10

libss0-heimdal - 0.4e-7.woody.10

m68k:

heimdal-clients - 0.4e-7.woody.10

heimdal-clients-x - 0.4e-7.woody.10

heimdal-dev - 0.4e-7.woody.10

heimdal-kdc - 0.4e-7.woody.10

heimdal-servers - 0.4e-7.woody.10

heimdal-servers-x - 0.4e-7.woody.10

libasn1-5-heimdal - 0.4e-7.woody.10

libcomerr1-heimdal - 0.4e-7.woody.10

libgssapi1-heimdal - 0.4e-7.woody.10

libhdb7-heimdal - 0.4e-7.woody.10

libkadm5clnt4-heimdal - 0.4e-7.woody.10

libkadm5srv7-heimdal - 0.4e-7.woody.10

libkafs0-heimdal - 0.4e-7.woody.10

libkrb5-17-heimdal - 0.4e-7.woody.10

libotp0-heimdal - 0.4e-7.woody.10

libroken9-heimdal - 0.4e-7.woody.10

libsl0-heimdal - 0.4e-7.woody.10

libss0-heimdal - 0.4e-7.woody.10

i686:

heimdal-clients - 0.4e-7.woody.10

heimdal-clients-x - 0.4e-7.woody.10

heimdal-dev - 0.4e-7.woody.10

heimdal-kdc - 0.4e-7.woody.10

heimdal-servers - 0.4e-7.woody.10

heimdal-servers-x - 0.4e-7.woody.10

libasn1-5-heimdal - 0.4e-7.woody.10

libcomerr1-heimdal - 0.4e-7.woody.10

libgssapi1-heimdal - 0.4e-7.woody.10

libhdb7-heimdal - 0.4e-7.woody.10

libkadm5clnt4-heimdal - 0.4e-7.woody.10

libkadm5srv7-heimdal - 0.4e-7.woody.10

libkafs0-heimdal - 0.4e-7.woody.10

libkrb5-17-heimdal - 0.4e-7.woody.10

libotp0-heimdal - 0.4e-7.woody.10

libroken9-heimdal - 0.4e-7.woody.10

libsl0-heimdal - 0.4e-7.woody.10

libss0-heimdal - 0.4e-7.woody.10

hppa:

heimdal-clients - 0.4e-7.woody.10

heimdal-clients-x - 0.4e-7.woody.10

heimdal-dev - 0.4e-7.woody.10

heimdal-kdc - 0.4e-7.woody.10

heimdal-servers - 0.4e-7.woody.10

heimdal-servers-x - 0.4e-7.woody.10

libasn1-5-heimdal - 0.4e-7.woody.10

libcomerr1-heimdal - 0.4e-7.woody.10

libgssapi1-heimdal - 0.4e-7.woody.10

libhdb7-heimdal - 0.4e-7.woody.10

libkadm5clnt4-heimdal - 0.4e-7.woody.10

libkadm5srv7-heimdal - 0.4e-7.woody.10

libkafs0-heimdal - 0.4e-7.woody.10

libkrb5-17-heimdal - 0.4e-7.woody.10

libotp0-heimdal - 0.4e-7.woody.10

libroken9-heimdal - 0.4e-7.woody.10

libsl0-heimdal - 0.4e-7.woody.10

libss0-heimdal - 0.4e-7.woody.10

sparc:

heimdal-clients - 0.4e-7.woody.10

heimdal-clients-x - 0.4e-7.woody.10

heimdal-dev - 0.4e-7.woody.10

heimdal-kdc - 0.4e-7.woody.10

heimdal-servers - 0.4e-7.woody.10

heimdal-servers-x - 0.4e-7.woody.10

libasn1-5-heimdal - 0.4e-7.woody.10

libcomerr1-heimdal - 0.4e-7.woody.10

libgssapi1-heimdal - 0.4e-7.woody.10

libhdb7-heimdal - 0.4e-7.woody.10

libkadm5clnt4-heimdal - 0.4e-7.woody.10

libkadm5srv7-heimdal - 0.4e-7.woody.10

libkafs0-heimdal - 0.4e-7.woody.10

libkrb5-17-heimdal - 0.4e-7.woody.10

libotp0-heimdal - 0.4e-7.woody.10

libroken9-heimdal - 0.4e-7.woody.10

libsl0-heimdal - 0.4e-7.woody.10

libss0-heimdal - 0.4e-7.woody.10

alpha:

heimdal-clients - 0.4e-7.woody.10

heimdal-clients-x - 0.4e-7.woody.10

heimdal-dev - 0.4e-7.woody.10

heimdal-kdc - 0.4e-7.woody.10

heimdal-servers - 0.4e-7.woody.10

heimdal-servers-x - 0.4e-7.woody.10

libasn1-5-heimdal - 0.4e-7.woody.10

libcomerr1-heimdal - 0.4e-7.woody.10

libgssapi1-heimdal - 0.4e-7.woody.10

libhdb7-heimdal - 0.4e-7.woody.10

libkadm5clnt4-heimdal - 0.4e-7.woody.10

libkadm5srv7-heimdal - 0.4e-7.woody.10

libkafs0-heimdal - 0.4e-7.woody.10

libkrb5-17-heimdal - 0.4e-7.woody.10

libotp0-heimdal - 0.4e-7.woody.10

libroken9-heimdal - 0.4e-7.woody.10

libsl0-heimdal - 0.4e-7.woody.10

libss0-heimdal - 0.4e-7.woody.10

ia64:

heimdal-clients - 0.4e-7.woody.10

heimdal-clients-x - 0.4e-7.woody.10

heimdal-dev - 0.4e-7.woody.10

heimdal-kdc - 0.4e-7.woody.10

heimdal-servers - 0.4e-7.woody.10

heimdal-servers-x - 0.4e-7.woody.10

libasn1-5-heimdal - 0.4e-7.woody.10

libcomerr1-heimdal - 0.4e-7.woody.10

libgssapi1-heimdal - 0.4e-7.woody.10

libhdb7-heimdal - 0.4e-7.woody.10

libkadm5clnt4-heimdal - 0.4e-7.woody.10

libkadm5srv7-heimdal - 0.4e-7.woody.10

libkafs0-heimdal - 0.4e-7.woody.10

libkrb5-17-heimdal - 0.4e-7.woody.10

libotp0-heimdal - 0.4e-7.woody.10

libroken9-heimdal - 0.4e-7.woody.10

libsl0-heimdal - 0.4e-7.woody.10

libss0-heimdal - 0.4e-7.woody.10

mips:

heimdal-clients - 0.4e-7.woody.10

heimdal-clients-x - 0.4e-7.woody.10

heimdal-dev - 0.4e-7.woody.10

heimdal-kdc - 0.4e-7.woody.10

heimdal-servers - 0.4e-7.woody.10

heimdal-servers-x - 0.4e-7.woody.10

libasn1-5-heimdal - 0.4e-7.woody.10

libcomerr1-heimdal - 0.4e-7.woody.10

libgssapi1-heimdal - 0.4e-7.woody.10

libhdb7-heimdal - 0.4e-7.woody.10

libkadm5clnt4-heimdal - 0.4e-7.woody.10

libkadm5srv7-heimdal - 0.4e-7.woody.10

libkafs0-heimdal - 0.4e-7.woody.10

libkrb5-17-heimdal - 0.4e-7.woody.10

libotp0-heimdal - 0.4e-7.woody.10

libroken9-heimdal - 0.4e-7.woody.10

libsl0-heimdal - 0.4e-7.woody.10

libss0-heimdal - 0.4e-7.woody.10

noarch:

heimdal-docs - 0.4e-7.woody.10

heimdal-lib - 0.4e-7.woody.10

mipsel:

heimdal-clients - 0.4e-7.woody.10

heimdal-clients-x - 0.4e-7.woody.10

heimdal-dev - 0.4e-7.woody.10

heimdal-kdc - 0.4e-7.woody.10

heimdal-servers - 0.4e-7.woody.10

heimdal-servers-x - 0.4e-7.woody.10

libasn1-5-heimdal - 0.4e-7.woody.10

libcomerr1-heimdal - 0.4e-7.woody.10

libgssapi1-heimdal - 0.4e-7.woody.10

libhdb7-heimdal - 0.4e-7.woody.10

libkadm5clnt4-heimdal - 0.4e-7.woody.10

libkadm5srv7-heimdal - 0.4e-7.woody.10

libkafs0-heimdal - 0.4e-7.woody.10

libkrb5-17-heimdal - 0.4e-7.woody.10

libotp0-heimdal - 0.4e-7.woody.10

libroken9-heimdal - 0.4e-7.woody.10

libsl0-heimdal - 0.4e-7.woody.10

libss0-heimdal - 0.4e-7.woody.10

arm:

heimdal-clients - 0.4e-7.woody.10

heimdal-clients-x - 0.4e-7.woody.10

heimdal-dev - 0.4e-7.woody.10

heimdal-kdc - 0.4e-7.woody.10

heimdal-servers - 0.4e-7.woody.10

heimdal-servers-x - 0.4e-7.woody.10

libasn1-5-heimdal - 0.4e-7.woody.10

libcomerr1-heimdal - 0.4e-7.woody.10

libgssapi1-heimdal - 0.4e-7.woody.10

libhdb7-heimdal - 0.4e-7.woody.10

libkadm5clnt4-heimdal - 0.4e-7.woody.10

libkadm5srv7-heimdal - 0.4e-7.woody.10

libkafs0-heimdal - 0.4e-7.woody.10

libkrb5-17-heimdal - 0.4e-7.woody.10

libotp0-heimdal - 0.4e-7.woody.10

libroken9-heimdal - 0.4e-7.woody.10

libsl0-heimdal - 0.4e-7.woody.10

libss0-heimdal - 0.4e-7.woody.10

Debian GNU/Linux 3.1:

ppc:

heimdal-clients - 0.6.3-10sarge1

heimdal-clients-x - 0.6.3-10sarge1

heimdal-dev - 0.6.3-10sarge1

heimdal-kdc - 0.6.3-10sarge1

heimdal-servers - 0.6.3-10sarge1

heimdal-servers-x - 0.6.3-10sarge1

libasn1-6-heimdal - 0.6.3-10sarge1

libgssapi1-heimdal - 0.6.3-10sarge1

libhdb7-heimdal - 0.6.3-10sarge1

libkadm5clnt4-heimdal - 0.6.3-10sarge1

libkadm5srv7-heimdal - 0.6.3-10sarge1

libkafs0-heimdal - 0.6.3-10sarge1

libkrb5-17-heimdal - 0.6.3-10sarge1

s390x:

heimdal-clients - 0.6.3-10sarge1

heimdal-clients-x - 0.6.3-10sarge1

heimdal-dev - 0.6.3-10sarge1

heimdal-kdc - 0.6.3-10sarge1

heimdal-servers - 0.6.3-10sarge1

heimdal-servers-x - 0.6.3-10sarge1

libasn1-6-heimdal - 0.6.3-10sarge1

libgssapi1-heimdal - 0.6.3-10sarge1

libhdb7-heimdal - 0.6.3-10sarge1

libkadm5clnt4-heimdal - 0.6.3-10sarge1

libkadm5srv7-heimdal - 0.6.3-10sarge1

libkafs0-heimdal - 0.6.3-10sarge1

libkrb5-17-heimdal - 0.6.3-10sarge1

m68k:

heimdal-clients - 0.6.3-10sarge1

heimdal-clients-x - 0.6.3-10sarge1

heimdal-dev - 0.6.3-10sarge1

heimdal-kdc - 0.6.3-10sarge1

heimdal-servers - 0.6.3-10sarge1

heimdal-servers-x - 0.6.3-10sarge1

libasn1-6-heimdal - 0.6.3-10sarge1

libgssapi1-heimdal - 0.6.3-10sarge1

libhdb7-heimdal - 0.6.3-10sarge1

libkadm5clnt4-heimdal - 0.6.3-10sarge1

libkadm5srv7-heimdal - 0.6.3-10sarge1

libkafs0-heimdal - 0.6.3-10sarge1

libkrb5-17-heimdal - 0.6.3-10sarge1

i686:

heimdal-clients - 0.6.3-10sarge1

heimdal-clients-x - 0.6.3-10sarge1

heimdal-dev - 0.6.3-10sarge1

heimdal-kdc - 0.6.3-10sarge1

heimdal-servers - 0.6.3-10sarge1

heimdal-servers-x - 0.6.3-10sarge1

libasn1-6-heimdal - 0.6.3-10sarge1

libgssapi1-heimdal - 0.6.3-10sarge1

libhdb7-heimdal - 0.6.3-10sarge1

libkadm5clnt4-heimdal - 0.6.3-10sarge1

libkadm5srv7-heimdal - 0.6.3-10sarge1

libkafs0-heimdal - 0.6.3-10sarge1

libkrb5-17-heimdal - 0.6.3-10sarge1

hppa:

heimdal-clients - 0.6.3-10sarge1

heimdal-clients-x - 0.6.3-10sarge1

heimdal-dev - 0.6.3-10sarge1

heimdal-kdc - 0.6.3-10sarge1

heimdal-servers - 0.6.3-10sarge1

heimdal-servers-x - 0.6.3-10sarge1

libasn1-6-heimdal - 0.6.3-10sarge1

libgssapi1-heimdal - 0.6.3-10sarge1

libhdb7-heimdal - 0.6.3-10sarge1

libkadm5clnt4-heimdal - 0.6.3-10sarge1

libkadm5srv7-heimdal - 0.6.3-10sarge1

libkafs0-heimdal - 0.6.3-10sarge1

libkrb5-17-heimdal - 0.6.3-10sarge1

sparc:

heimdal-clients - 0.6.3-10sarge1

heimdal-clients-x - 0.6.3-10sarge1

heimdal-dev - 0.6.3-10sarge1

heimdal-kdc - 0.6.3-10sarge1

heimdal-servers - 0.6.3-10sarge1

heimdal-servers-x - 0.6.3-10sarge1

libasn1-6-heimdal - 0.6.3-10sarge1

libgssapi1-heimdal - 0.6.3-10sarge1

libhdb7-heimdal - 0.6.3-10sarge1

libkadm5clnt4-heimdal - 0.6.3-10sarge1

libkadm5srv7-heimdal - 0.6.3-10sarge1

libkafs0-heimdal - 0.6.3-10sarge1

libkrb5-17-heimdal - 0.6.3-10sarge1

alpha:

heimdal-clients - 0.6.3-10sarge1

heimdal-clients-x - 0.6.3-10sarge1

heimdal-dev - 0.6.3-10sarge1

heimdal-kdc - 0.6.3-10sarge1

heimdal-servers - 0.6.3-10sarge1

heimdal-servers-x - 0.6.3-10sarge1

libasn1-6-heimdal - 0.6.3-10sarge1

libgssapi1-heimdal - 0.6.3-10sarge1

libhdb7-heimdal - 0.6.3-10sarge1

libkadm5clnt4-heimdal - 0.6.3-10sarge1

libkadm5srv7-heimdal - 0.6.3-10sarge1

libkafs0-heimdal - 0.6.3-10sarge1

libkrb5-17-heimdal - 0.6.3-10sarge1

ia64:

heimdal-clients - 0.6.3-10sarge1

heimdal-clients-x - 0.6.3-10sarge1

heimdal-dev - 0.6.3-10sarge1

heimdal-kdc - 0.6.3-10sarge1

heimdal-servers - 0.6.3-10sarge1

heimdal-servers-x - 0.6.3-10sarge1

libasn1-6-heimdal - 0.6.3-10sarge1

libgssapi1-heimdal - 0.6.3-10sarge1

libhdb7-heimdal - 0.6.3-10sarge1

libkadm5clnt4-heimdal - 0.6.3-10sarge1

libkadm5srv7-heimdal - 0.6.3-10sarge1

libkafs0-heimdal - 0.6.3-10sarge1

libkrb5-17-heimdal - 0.6.3-10sarge1

mips:

heimdal-clients - 0.6.3-10sarge1

heimdal-clients-x - 0.6.3-10sarge1

heimdal-dev - 0.6.3-10sarge1

heimdal-kdc - 0.6.3-10sarge1

heimdal-servers - 0.6.3-10sarge1

heimdal-servers-x - 0.6.3-10sarge1

libasn1-6-heimdal - 0.6.3-10sarge1

libgssapi1-heimdal - 0.6.3-10sarge1

libhdb7-heimdal - 0.6.3-10sarge1

libkadm5clnt4-heimdal - 0.6.3-10sarge1

libkadm5srv7-heimdal - 0.6.3-10sarge1

libkafs0-heimdal - 0.6.3-10sarge1

libkrb5-17-heimdal - 0.6.3-10sarge1

noarch:

heimdal-docs - 0.6.3-10sarge1

mipsel:

heimdal-clients - 0.6.3-10sarge1

heimdal-clients-x - 0.6.3-10sarge1

heimdal-dev - 0.6.3-10sarge1

heimdal-kdc - 0.6.3-10sarge1

heimdal-servers - 0.6.3-10sarge1

heimdal-servers-x - 0.6.3-10sarge1

libasn1-6-heimdal - 0.6.3-10sarge1

libgssapi1-heimdal - 0.6.3-10sarge1

libhdb7-heimdal - 0.6.3-10sarge1

libkadm5clnt4-heimdal - 0.6.3-10sarge1

libkadm5srv7-heimdal - 0.6.3-10sarge1

libkafs0-heimdal - 0.6.3-10sarge1

libkrb5-17-heimdal - 0.6.3-10sarge1

arm:

heimdal-clients - 0.6.3-10sarge1

heimdal-clients-x - 0.6.3-10sarge1

heimdal-dev - 0.6.3-10sarge1

heimdal-kdc - 0.6.3-10sarge1

heimdal-servers - 0.6.3-10sarge1

heimdal-servers-x - 0.6.3-10sarge1

libasn1-6-heimdal - 0.6.3-10sarge1

libgssapi1-heimdal - 0.6.3-10sarge1

libhdb7-heimdal - 0.6.3-10sarge1

libkadm5clnt4-heimdal - 0.6.3-10sarge1

libkadm5srv7-heimdal - 0.6.3-10sarge1

libkafs0-heimdal - 0.6.3-10sarge1

libkrb5-17-heimdal - 0.6.3-10sarge1

Статус уязвимости

Подтверждена производителем

Наличие эксплойта

Данные уточняются

Информация об устранении

Уязвимость устранена

Ссылки на источники

Идентификаторы других систем описаний уязвимостей

EPSS

Процентиль: 83%

0.02015

Низкий

5 Medium

CVSS2

Связанные уязвимости

CVE-2005-2040

ubuntu

около 20 лет назад

Multiple buffer overflows in the getterminaltype function in telnetd for Heimdal before 0.6.5 may allow remote attackers to execute arbitrary code, a different vulnerability than CVE-2005-0468 and CVE-2005-0469.