ID de Prueba:	1.3.6.1.4.1.25623.1.0.54606
Categoría:	Gentoo Local Security Checks
Título:	Gentoo Security Advisory GLSA 200406-21 (mit-krb5)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory GLSA 200406-21. mit-krb5 contains multiple buffer overflows in the function krb5_aname_to_localname(). This could potentially lead to a complete remote system compromise. Solution: mit-krb5 users should upgrade to the latest version: # emerge sync # emerge -pv '>=app-crypt/mit-krb5-1.3.3-r1' # emerge '>=app-crypt/mit-krb5-1.3.3-r1' http://www.securityspace.com/smysecure/catid.html?in=GLSA%20200406-21 http://bugs.gentoo.org/show_bug.cgi?id=52744 http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2004-001-an_to_ln.txt CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	BugTraq ID: 10448 Common Vulnerability Exposure (CVE) ID: CVE-2004-0523 http://www.securityfocus.com/bid/10448 Bugtraq: 20040601 MITKRB5-SA-2004-001: buffer overflows in krb5_aname_to_localname (Google Search) http://marc.info/?l=bugtraq&m=108612325909496&w=2 Bugtraq: 20040602 TSSA-2004-009 - kerberos5 (Google Search) http://marc.info/?l=bugtraq&m=108619161815320&w=2 CERT/CC vulnerability note: VU#686862 http://www.kb.cert.org/vuls/id/686862 Conectiva Linux advisory: CLA-2004:860 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000860 Debian Security Information: DSA-520 (Google Search) http://www.debian.org/security/2004/dsa-520 http://lwn.net/Articles/88206/ http://www.gentoo.org/security/en/glsa/glsa-200406-21.xml http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:056 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10295 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2002 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A724 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A991 http://www.redhat.com/support/errata/RHSA-2004-236.html SGI Security Advisory: 20040604-01-U ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc SGI Security Advisory: 20040605-01-U ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc http://sunsolve.sun.com/search/document.do?assetkey=1-26-101512-1 http://marc.info/?l=bugtraq&m=108619250923790&w=2 XForce ISS Database: Kerberos-krb5anametolocalname-bo(16268) https://exchange.xforce.ibmcloud.com/vulnerabilities/16268
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.