Paketname
krb5
Datum
2011-10-22
Advisory ID
MDVSA-2011:159
Betroffene Versionen
2011 i586 , 2011 x86_64

Problembeschreibung

Multiple vulnerabilities has been found and corrected in krb5:

The kdb_ldap plugin in the Key Distribution Center (KDC) in
MIT Kerberos 5 (aka krb5) 1.9 through 1.9.1, when the LDAP
back end is used, allows remote attackers to cause a denial of
service (NULL pointer dereference and daemon crash) via a kinit
operation with incorrect string case for the realm, related to the
is_principal_in_realm, krb5_set_error_message, krb5_ldap_get_principal,
and process_as_req functions (CVE-2011-1527).

The krb5_ldap_lockout_audit function in the Key Distribution Center
(KDC) in MIT Kerberos 5 (aka krb5) 1.8 through 1.8.4 and 1.9 through
1.9.1, when the LDAP back end is used, allows remote attackers to cause
a denial of service (assertion failure and daemon exit) via unspecified
vectors, related to the locked_check_p function (CVE-2011-1528).

The lookup_lockout_policy function in the Key Distribution Center (KDC)
in MIT Kerberos 5 (aka krb5) 1.8 through 1.8.4 and 1.9 through 1.9.1,
when the db2 (aka Berkeley DB) or LDAP back end is used, allows remote
attackers to cause a denial of service (NULL pointer dereference and
daemon crash) via vectors that trigger certain process_as_req errors
(CVE-2011-1529).

The updated packages have been patched to correct these issues.

Aktualisierte Pakete

2011 i586

 cec18dcb661488f6203f1ece61b635d1  2011/i586/krb5-1.9.1-1.1-mdv2011.0.i586.rpm
 a4a3f2eee29c35048289de09ecf52ed8  2011/i586/krb5-pkinit-openssl-1.9.1-1.1-mdv2011.0.i586.rpm
 5e73f3eb097442260b8b683b48a3497c  2011/i586/krb5-server-1.9.1-1.1-mdv2011.0.i586.rpm
 83401420817b2e182d6096a7fab0b4d4  2011/i586/krb5-server-ldap-1.9.1-1.1-mdv2011.0.i586.rpm
 8d038ca1ea3baa3862df07b714196e29  2011/i586/krb5-workstation-1.9.1-1.1-mdv2011.0.i586.rpm
 666e6590112610d0974c808c18e15857  2011/i586/libkrb53-1.9.1-1.1-mdv2011.0.i586.rpm
 822e804be6b1b6c6daf4036e58c8d097  2011/i586/libkrb53-devel-1.9.1-1.1-mdv2011.0.i586.rpm 
 44b9f82fcf337955b550e2b8279cc319  2011/SRPMS/krb5-1.9.1-1.1.src.rpm

2011 x86_64

 c1a3ce4fed380b27b58fdb5a1de4a225  2011/x86_64/krb5-1.9.1-1.1-mdv2011.0.x86_64.rpm
 31abe59dbe968c413e91d9bc8f58cc6f  2011/x86_64/krb5-pkinit-openssl-1.9.1-1.1-mdv2011.0.x86_64.rpm
 3978b0e72b6f25f816554cb3f632fbd9  2011/x86_64/krb5-server-1.9.1-1.1-mdv2011.0.x86_64.rpm
 03b1d9c2b9ef5a18af5f47e93c7f5b7b  2011/x86_64/krb5-server-ldap-1.9.1-1.1-mdv2011.0.x86_64.rpm
 8c9cf44a634d326e5fcc03adad2c673f  2011/x86_64/krb5-workstation-1.9.1-1.1-mdv2011.0.x86_64.rpm
 cb1303ca942bc49cfa41e7871dc8ace8  2011/x86_64/lib64krb53-1.9.1-1.1-mdv2011.0.x86_64.rpm
 6317fcfa9e3e569645f5a6df6250ce34  2011/x86_64/lib64krb53-devel-1.9.1-1.1-mdv2011.0.x86_64.rpm 
 44b9f82fcf337955b550e2b8279cc319  2011/SRPMS/krb5-1.9.1-1.1.src.rpm

Referenzen