Test Kennung:	1.3.6.1.4.1.25623.1.0.892041
Kategorie:	Debian Local Security Checks
Titel:	Debian LTS: Security Advisory for debian-edu-config (DLA-2041-1)
Zusammenfassung:	The remote host is missing an update for the 'debian-edu-config'; package(s) announced via the DLA-2041-1 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'debian-edu-config' package(s) announced via the DLA-2041-1 advisory. Vulnerability Insight: It was discovered that debian-edu-config, the package containing the configuration files and scripts for Debian Edu (Skolelinux), contained an insecure configuration for kadmin, the Kerberos administration server. The insecure configuration allowed every user to change other users' passwords, thus impersonating them and possibly gaining their privileges. The bug was not exposed in the officially documented user management frontends of Debian Edu, but could be abused by local network users knowing how to use the Kerberos backend. Affected Software/OS: 'debian-edu-config' package(s) on Debian Linux. Solution: For Debian 8 'Jessie', this problem has been fixed in version 1.818+deb8u3. We recommend that you upgrade your debian-edu-config packages. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2019-3467 Bugtraq: 20191218 [SECURITY] [DSA 4589-1] debian-edu-config security update (Google Search) https://seclists.org/bugtraq/2019/Dec/34 Bugtraq: 20191229 [SECURITY] [DSA 4595-1] debian-lan-config security update (Google Search) https://seclists.org/bugtraq/2019/Dec/44 Debian Security Information: DSA-4589 (Google Search) https://www.debian.org/security/2019/dsa-4589 Debian Security Information: DSA-4595 (Google Search) https://www.debian.org/security/2019/dsa-4595 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=946797 https://lists.debian.org/debian-lts-announce/2019/12/msg00023.html https://lists.debian.org/debian-lts-announce/2020/01/msg00012.html https://usn.ubuntu.com/4530-1/
Copyright	Copyright (C) 2019 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.