Paketname
krb5
Datum
2011-10-22
Advisory ID
MDVSA-2011:160
Betroffene Versionen
MES5 i586 , MES5 x86_64 , 2010.1 i586 , 2010.1 x86_64

Problembeschreibung

Multiple vulnerabilities has been found and corrected in krb5:

The krb5_ldap_lockout_audit function in the Key Distribution Center
(KDC) in MIT Kerberos 5 (aka krb5) 1.8 through 1.8.4 and 1.9 through
1.9.1, when the LDAP back end is used, allows remote attackers to cause
a denial of service (assertion failure and daemon exit) via unspecified
vectors, related to the locked_check_p function (CVE-2011-1528).

The lookup_lockout_policy function in the Key Distribution Center (KDC)
in MIT Kerberos 5 (aka krb5) 1.8 through 1.8.4 and 1.9 through 1.9.1,
when the db2 (aka Berkeley DB) or LDAP back end is used, allows remote
attackers to cause a denial of service (NULL pointer dereference and
daemon crash) via vectors that trigger certain process_as_req errors
(CVE-2011-1529).

The updated packages have been patched to correct these issues.

Aktualisierte Pakete

MES5 i586

 1aace07998863fe7f30d2fb91993d7b2  mes5/i586/krb5-1.8.1-0.7mdvmes5.2.i586.rpm
 d4b71902ff32d362e2a5d7fe2e4e9a71  mes5/i586/krb5-pkinit-openssl-1.8.1-0.7mdvmes5.2.i586.rpm
 858c3babd9f4fa4badd04a3676c755c7  mes5/i586/krb5-server-1.8.1-0.7mdvmes5.2.i586.rpm
 63a002132291b4cda6a750e47ec0bece  mes5/i586/krb5-server-ldap-1.8.1-0.7mdvmes5.2.i586.rpm
 7238700c172cf9e4c7b94af1f016201c  mes5/i586/krb5-workstation-1.8.1-0.7mdvmes5.2.i586.rpm
 3e3b2122ea7a58503d26713254e9f97b  mes5/i586/libkrb53-1.8.1-0.7mdvmes5.2.i586.rpm
 ae343104b7643e7558930d2f85af5091  mes5/i586/libkrb53-devel-1.8.1-0.7mdvmes5.2.i586.rpm 
 1b3d691cf8b9d2c01463593cf4e2e1d5  mes5/SRPMS/krb5-1.8.1-0.7mdvmes5.2.src.rpm

MES5 x86_64

 b1912a66538b9c45c67691d2a3523576  mes5/x86_64/krb5-1.8.1-0.7mdvmes5.2.x86_64.rpm
 2f1989fb1412fc1581f41d416146e659  mes5/x86_64/krb5-pkinit-openssl-1.8.1-0.7mdvmes5.2.x86_64.rpm
 6f34d14eae154ff5991e248c18021eb2  mes5/x86_64/krb5-server-1.8.1-0.7mdvmes5.2.x86_64.rpm
 69649b642ac23f458d8e02f1e7d549d0  mes5/x86_64/krb5-server-ldap-1.8.1-0.7mdvmes5.2.x86_64.rpm
 50f5feb5c21c5a246917e0b06faf28c6  mes5/x86_64/krb5-workstation-1.8.1-0.7mdvmes5.2.x86_64.rpm
 4a2e291f75ec2288df3a7c28ea5b2ba1  mes5/x86_64/lib64krb53-1.8.1-0.7mdvmes5.2.x86_64.rpm
 f95b08bf29f82897105d8b853b42df67  mes5/x86_64/lib64krb53-devel-1.8.1-0.7mdvmes5.2.x86_64.rpm 
 1b3d691cf8b9d2c01463593cf4e2e1d5  mes5/SRPMS/krb5-1.8.1-0.7mdvmes5.2.src.rpm

2010.1 i586

 3c2e6b5720aafe4283403170c2d58492  2010.1/i586/krb5-1.8.1-5.6mdv2010.2.i586.rpm
 3ac1a5668862182f3a48338c2f76cf81  2010.1/i586/krb5-pkinit-openssl-1.8.1-5.6mdv2010.2.i586.rpm
 0fc35189df3032ea14d295cf8bc58839  2010.1/i586/krb5-server-1.8.1-5.6mdv2010.2.i586.rpm
 00caac26b6e5a59d776440266002b3ab  2010.1/i586/krb5-server-ldap-1.8.1-5.6mdv2010.2.i586.rpm
 a5320af15d594506ad2055b739211565  2010.1/i586/krb5-workstation-1.8.1-5.6mdv2010.2.i586.rpm
 0bba786af6f0e73b380bfa77321aaee5  2010.1/i586/libkrb53-1.8.1-5.6mdv2010.2.i586.rpm
 c233f28e23d554bf8cbc62c22f7e4a44  2010.1/i586/libkrb53-devel-1.8.1-5.6mdv2010.2.i586.rpm 
 0f748bb4522391005759bf2915b67d89  2010.1/SRPMS/krb5-1.8.1-5.6mdv2010.2.src.rpm

2010.1 x86_64

 a24d3b618ae99dc2d2197c5df1adcbfc  2010.1/x86_64/krb5-1.8.1-5.6mdv2010.2.x86_64.rpm
 78ffd9611e8106a61fb00201504110a7  2010.1/x86_64/krb5-pkinit-openssl-1.8.1-5.6mdv2010.2.x86_64.rpm
 3b9baf5a46fc90e9cf0069c23bd87655  2010.1/x86_64/krb5-server-1.8.1-5.6mdv2010.2.x86_64.rpm
 f7e6d0006e504520bf811144c2639238  2010.1/x86_64/krb5-server-ldap-1.8.1-5.6mdv2010.2.x86_64.rpm
 cbcdb6e8882eb7f0b2d2933e7620c108  2010.1/x86_64/krb5-workstation-1.8.1-5.6mdv2010.2.x86_64.rpm
 06549d9617286d573fac8c522f62edfb  2010.1/x86_64/lib64krb53-1.8.1-5.6mdv2010.2.x86_64.rpm
 ba81b94a26532fb2bddc3d5de201aa76  2010.1/x86_64/lib64krb53-devel-1.8.1-5.6mdv2010.2.x86_64.rpm 
 0f748bb4522391005759bf2915b67d89  2010.1/SRPMS/krb5-1.8.1-5.6mdv2010.2.src.rpm

Referenzen