Test Kennung:	1.3.6.1.4.1.25623.1.0.831711
Kategorie:	Mandrake Local Security Checks
Titel:	Mandriva Update for krb5 MDVSA-2012:120 (krb5)
Zusammenfassung:	The remote host is missing an update for the 'krb5'; package(s) announced via the referenced advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'krb5' package(s) announced via the referenced advisory. Vulnerability Insight: A vulnerability has been discovered and corrected in krb5: The MIT krb5 KDC (Key Distribution Center) daemon can free an uninitialized pointer while processing an unusual AS-REQ, corrupting the process heap and possibly causing the daemon to abnormally terminate. An attacker could use this vulnerability to execute malicious code, but exploiting frees of uninitialized pointers to execute code is believed to be difficult. It is possible that a legitimate client that is misconfigured in an unusual way could trigger this vulnerability (CVE-2012-1015). The updated packages have been patched to correct this issue. Affected Software/OS: krb5 on Mandriva Linux 2011.0, Mandriva Enterprise Server 5.2 Solution: Please Install the Updated Packages. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2012-1015 Debian Security Information: DSA-2518 (Google Search) http://www.debian.org/security/2012/dsa-2518 http://www.mandriva.com/security/advisories?name=MDVSA-2012:120 RedHat Security Advisories: RHSA-2012:1131 http://rhn.redhat.com/errata/RHSA-2012-1131.html SuSE Security Announcement: openSUSE-SU-2012:0967 (Google Search) http://lists.opensuse.org/opensuse-updates/2012-08/msg00016.html
Copyright	Copyright (c) 2012 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.