Test Kennung:	1.3.6.1.4.1.25623.1.0.52650
Kategorie:	FreeBSD Local Security Checks
Titel:	FreeBSD Security Advisory (FreeBSD-SA-04:08.heimdal.asc)
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-04:08.heimdal.asc Heimdal implements the Kerberos 5 network authentication protocols. Principals (i.e. users and services) represented in Kerberos are grouped into separate, autonomous realms. Unidirectional or bidirectional trust relationships may be established between realms to allow the principals in one realm to recognize the authenticity of principals in another. These trust relationships may be transitive. An authentication path is the ordered list of realms (and therefore KDCs) that were involved in the authentication process. The authentication path is recorded in Kerberos tickets as the `transited' field. It is possible for the Key Distribution Center (KDC) of a realm to forge part or all of the `transited' field. KDCs should validate this field before accepting authentication results, checking that each realm in the authentication path is trusted and that the path conforms to local policy. Applications are required to perform this type of checking if the KDC has not already done so. Prior to FreeBSD 5.1, Kerberos 5 was an optional component of FreeBSD, and was not installed by default. Some versions of Heimdal do not perform appropriate checking of the `transited' field. Solution: Upgrade your system to the appropriate stable release or security branch dated after the correction date http://www.securityspace.com/smysecure/catid.html?in=FreeBSD-SA-04:08.heimdal.asc CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Querverweis:	BugTraq ID: 10035 Common Vulnerability Exposure (CVE) ID: CVE-2004-0371 Debian Security Information: DSA-476 (Google Search) http://www.debian.org/security/2004/dsa-476 FreeBSD Security Advisory: FreeBSD-SA-04:08 ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:08.heimdal.asc http://security.gentoo.org/glsa/glsa-200404-09.xml OpenBSD Security Advisory: 20040530 009: SECURITY FIX: May 30, 2004 ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/009_kerberos.patch XForce ISS Database: heimdal-cross-realm-spoofing(15701) https://exchange.xforce.ibmcloud.com/vulnerabilities/15701
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.