BDU:2015-01360

Опубликовано: 01 янв. 2015

Источник: fstec

CVSS2: 7.8

EPSS Низкий

Описание

Множественные уязвимости пакета libkafs0-heimdal операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно

Вендор

Сообщество свободного программного обеспечения

Наименование ПО

Debian GNU/Linux

Версия ПО

до 3.1 (Debian GNU/Linux)

Тип ПО

Операционная система

Операционные системы и аппаратные платформы

Уровень опасности уязвимости

Высокий уровень опасности (базовая оценка CVSS 2.0 составляет 7,8)

Возможные меры по устранению уязвимости

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:

Debian GNU/Linux 3.1:

ppc:

heimdal-clients - 0.6.3-10sarge2

heimdal-clients-x - 0.6.3-10sarge2

heimdal-dev - 0.6.3-10sarge2

heimdal-kdc - 0.6.3-10sarge2

heimdal-servers - 0.6.3-10sarge2

heimdal-servers-x - 0.6.3-10sarge2

libasn1-6-heimdal - 0.6.3-10sarge2

libgssapi1-heimdal - 0.6.3-10sarge2

libhdb7-heimdal - 0.6.3-10sarge2

libkadm5clnt4-heimdal - 0.6.3-10sarge2

libkadm5srv7-heimdal - 0.6.3-10sarge2

libkafs0-heimdal - 0.6.3-10sarge2

libkrb5-17-heimdal - 0.6.3-10sarge2

s390x:

heimdal-clients - 0.6.3-10sarge2

heimdal-clients-x - 0.6.3-10sarge2

heimdal-dev - 0.6.3-10sarge2

heimdal-kdc - 0.6.3-10sarge2

heimdal-servers - 0.6.3-10sarge2

heimdal-servers-x - 0.6.3-10sarge2

libasn1-6-heimdal - 0.6.3-10sarge2

libgssapi1-heimdal - 0.6.3-10sarge2

libhdb7-heimdal - 0.6.3-10sarge2

libkadm5clnt4-heimdal - 0.6.3-10sarge2

libkadm5srv7-heimdal - 0.6.3-10sarge2

libkafs0-heimdal - 0.6.3-10sarge2

libkrb5-17-heimdal - 0.6.3-10sarge2

m68k:

heimdal-clients - 0.6.3-10sarge2

heimdal-clients-x - 0.6.3-10sarge2

heimdal-dev - 0.6.3-10sarge2

heimdal-kdc - 0.6.3-10sarge2

heimdal-servers - 0.6.3-10sarge2

heimdal-servers-x - 0.6.3-10sarge2

libasn1-6-heimdal - 0.6.3-10sarge2

libgssapi1-heimdal - 0.6.3-10sarge2

libhdb7-heimdal - 0.6.3-10sarge2

libkadm5clnt4-heimdal - 0.6.3-10sarge2

libkadm5srv7-heimdal - 0.6.3-10sarge2

libkafs0-heimdal - 0.6.3-10sarge2

libkrb5-17-heimdal - 0.6.3-10sarge2

i686:

heimdal-clients - 0.6.3-10sarge2

heimdal-clients-x - 0.6.3-10sarge2

heimdal-dev - 0.6.3-10sarge2

heimdal-kdc - 0.6.3-10sarge2

heimdal-servers - 0.6.3-10sarge2

heimdal-servers-x - 0.6.3-10sarge2

libasn1-6-heimdal - 0.6.3-10sarge2

libgssapi1-heimdal - 0.6.3-10sarge2

libhdb7-heimdal - 0.6.3-10sarge2

libkadm5clnt4-heimdal - 0.6.3-10sarge2

libkadm5srv7-heimdal - 0.6.3-10sarge2

libkafs0-heimdal - 0.6.3-10sarge2

libkrb5-17-heimdal - 0.6.3-10sarge2

arm:

heimdal-clients - 0.6.3-10sarge2

heimdal-clients-x - 0.6.3-10sarge2

heimdal-dev - 0.6.3-10sarge2

heimdal-kdc - 0.6.3-10sarge2

heimdal-servers - 0.6.3-10sarge2

heimdal-servers-x - 0.6.3-10sarge2

libasn1-6-heimdal - 0.6.3-10sarge2

libgssapi1-heimdal - 0.6.3-10sarge2

libhdb7-heimdal - 0.6.3-10sarge2

libkadm5clnt4-heimdal - 0.6.3-10sarge2

libkadm5srv7-heimdal - 0.6.3-10sarge2

libkafs0-heimdal - 0.6.3-10sarge2

libkrb5-17-heimdal - 0.6.3-10sarge2

sparc:

heimdal-clients - 0.6.3-10sarge2

heimdal-clients-x - 0.6.3-10sarge2

heimdal-dev - 0.6.3-10sarge2

heimdal-kdc - 0.6.3-10sarge2

heimdal-servers - 0.6.3-10sarge2

heimdal-servers-x - 0.6.3-10sarge2

libasn1-6-heimdal - 0.6.3-10sarge2

libgssapi1-heimdal - 0.6.3-10sarge2

libhdb7-heimdal - 0.6.3-10sarge2

libkadm5clnt4-heimdal - 0.6.3-10sarge2

libkadm5srv7-heimdal - 0.6.3-10sarge2

libkafs0-heimdal - 0.6.3-10sarge2

libkrb5-17-heimdal - 0.6.3-10sarge2

x86-64:

heimdal-clients - 0.6.3-10sarge2

heimdal-clients-x - 0.6.3-10sarge2

heimdal-dev - 0.6.3-10sarge2

heimdal-kdc - 0.6.3-10sarge2

heimdal-servers - 0.6.3-10sarge2

heimdal-servers-x - 0.6.3-10sarge2

libasn1-6-heimdal - 0.6.3-10sarge2

libgssapi1-heimdal - 0.6.3-10sarge2

libhdb7-heimdal - 0.6.3-10sarge2

libkadm5clnt4-heimdal - 0.6.3-10sarge2

libkadm5srv7-heimdal - 0.6.3-10sarge2

libkafs0-heimdal - 0.6.3-10sarge2

libkrb5-17-heimdal - 0.6.3-10sarge2

alpha:

heimdal-clients - 0.6.3-10sarge2

heimdal-clients-x - 0.6.3-10sarge2

heimdal-dev - 0.6.3-10sarge2

heimdal-kdc - 0.6.3-10sarge2

heimdal-servers - 0.6.3-10sarge2

heimdal-servers-x - 0.6.3-10sarge2

libasn1-6-heimdal - 0.6.3-10sarge2

libgssapi1-heimdal - 0.6.3-10sarge2

libhdb7-heimdal - 0.6.3-10sarge2

libkadm5clnt4-heimdal - 0.6.3-10sarge2

libkadm5srv7-heimdal - 0.6.3-10sarge2

libkafs0-heimdal - 0.6.3-10sarge2

libkrb5-17-heimdal - 0.6.3-10sarge2

ia64:

heimdal-clients - 0.6.3-10sarge2

heimdal-clients-x - 0.6.3-10sarge2

heimdal-dev - 0.6.3-10sarge2

heimdal-kdc - 0.6.3-10sarge2

heimdal-servers - 0.6.3-10sarge2

heimdal-servers-x - 0.6.3-10sarge2

libasn1-6-heimdal - 0.6.3-10sarge2

libgssapi1-heimdal - 0.6.3-10sarge2

libhdb7-heimdal - 0.6.3-10sarge2

libkadm5clnt4-heimdal - 0.6.3-10sarge2

libkadm5srv7-heimdal - 0.6.3-10sarge2

libkafs0-heimdal - 0.6.3-10sarge2

libkrb5-17-heimdal - 0.6.3-10sarge2

mips:

heimdal-clients - 0.6.3-10sarge2

heimdal-clients-x - 0.6.3-10sarge2

heimdal-dev - 0.6.3-10sarge2

heimdal-kdc - 0.6.3-10sarge2

heimdal-servers - 0.6.3-10sarge2

heimdal-servers-x - 0.6.3-10sarge2

libasn1-6-heimdal - 0.6.3-10sarge2

libgssapi1-heimdal - 0.6.3-10sarge2

libhdb7-heimdal - 0.6.3-10sarge2

libkadm5clnt4-heimdal - 0.6.3-10sarge2

libkadm5srv7-heimdal - 0.6.3-10sarge2

libkafs0-heimdal - 0.6.3-10sarge2

libkrb5-17-heimdal - 0.6.3-10sarge2

noarch:

heimdal-docs - 0.6.3-10sarge2

mipsel:

heimdal-clients - 0.6.3-10sarge2

heimdal-clients-x - 0.6.3-10sarge2

heimdal-dev - 0.6.3-10sarge2

heimdal-kdc - 0.6.3-10sarge2

heimdal-servers - 0.6.3-10sarge2

heimdal-servers-x - 0.6.3-10sarge2

libasn1-6-heimdal - 0.6.3-10sarge2

libgssapi1-heimdal - 0.6.3-10sarge2

libhdb7-heimdal - 0.6.3-10sarge2

libkadm5clnt4-heimdal - 0.6.3-10sarge2

libkadm5srv7-heimdal - 0.6.3-10sarge2

libkafs0-heimdal - 0.6.3-10sarge2

libkrb5-17-heimdal - 0.6.3-10sarge2

hppa:

heimdal-clients - 0.6.3-10sarge2

heimdal-clients-x - 0.6.3-10sarge2

heimdal-dev - 0.6.3-10sarge2

heimdal-kdc - 0.6.3-10sarge2

heimdal-servers - 0.6.3-10sarge2

heimdal-servers-x - 0.6.3-10sarge2

libasn1-6-heimdal - 0.6.3-10sarge2

libgssapi1-heimdal - 0.6.3-10sarge2

libhdb7-heimdal - 0.6.3-10sarge2

libkadm5clnt4-heimdal - 0.6.3-10sarge2

libkadm5srv7-heimdal - 0.6.3-10sarge2

libkafs0-heimdal - 0.6.3-10sarge2

libkrb5-17-heimdal - 0.6.3-10sarge2

Статус уязвимости

Подтверждена производителем

Наличие эксплойта

Данные уточняются

Информация об устранении

Уязвимость устранена

Ссылки на источники

Идентификаторы других систем описаний уязвимостей

EPSS

Процентиль: 26%

0.00085

Низкий

7.8 High

CVSS2

Связанные уязвимости

CVE-2006-0582

ubuntu

больше 19 лет назад

Unspecified vulnerability in rshd in Heimdal 0.6.x before 0.6.6 and 0.7.x before 0.7.2, when storing forwarded credentials, allows attackers to overwrite arbitrary files and change file ownership via unknown vectors.