Описание
ELSA-2011-1379: krb5 security update (MODERATE)
[1.9-9.2]
- apply upstream patch to fix a null pointer derference with the LDAP kdb backend (CVE-2011-1527), an assertion failure with multiple kdb backends (CVE-2011-1528), and a null pointer dereference with multiple kdb backends (CVE-2011-1529) (#740084)
Обновленные пакеты
Oracle Linux 6
Oracle Linux x86_64
krb5-devel
1.9-9.el6_1.2
krb5-libs
1.9-9.el6_1.2
krb5-pkinit-openssl
1.9-9.el6_1.2
krb5-server
1.9-9.el6_1.2
krb5-server-ldap
1.9-9.el6_1.2
krb5-workstation
1.9-9.el6_1.2
Oracle Linux i686
krb5-devel
1.9-9.el6_1.2
krb5-libs
1.9-9.el6_1.2
krb5-pkinit-openssl
1.9-9.el6_1.2
krb5-server
1.9-9.el6_1.2
krb5-server-ldap
1.9-9.el6_1.2
krb5-workstation
1.9-9.el6_1.2
Связанные CVE
Связанные уязвимости
Уязвимости операционной системы Gentoo Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации
The kdb_ldap plugin in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 through 1.9.1, when the LDAP back end is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a kinit operation with incorrect string case for the realm, related to the is_principal_in_realm, krb5_set_error_message, krb5_ldap_get_principal, and process_as_req functions.
The kdb_ldap plugin in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 through 1.9.1, when the LDAP back end is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a kinit operation with incorrect string case for the realm, related to the is_principal_in_realm, krb5_set_error_message, krb5_ldap_get_principal, and process_as_req functions.
The kdb_ldap plugin in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 through 1.9.1, when the LDAP back end is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a kinit operation with incorrect string case for the realm, related to the is_principal_in_realm, krb5_set_error_message, krb5_ldap_get_principal, and process_as_req functions.
The kdb_ldap plugin in the Key Distribution Center (KDC) in MIT Kerber ...