Oval Definition:	oval:org.mitre.oval:def:21141
Revision Date: 2014-02-17 Version: 12 Title: RHSA-2013:0942: krb5 security update (Moderate) Description: schpw.c in the kpasswd service in kadmind in MIT Kerberos 5 (aka krb5) before 1.11.3 does not properly validate UDP packets before sending responses, which allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged packet that triggers a communication loop, as demonstrated by krb_pingpong.nasl, a related issue to CVE-1999-0103. Family: unix Class: patch Status: ACCEPTED Reference(s): CESA-2013:0942 CVE-2002-2443 RHSA-2013:0942-01 Platform(s): CentOS Linux 5 CentOS Linux 6 Red Hat Enterprise Linux 5 Red Hat Enterprise Linux 6 Product(s): krb5 Definition Synopsis Operation system section Redhat 6 or Centos 6 release The operating system installed on the system is Red Hat Enterprise Linux 6 OR The operating system installed on the system is CentOS Linux 6.x AND Packages section krb5-server-ldap is earlier than 0:1.10.3-10.el6_4.3 OR krb5-devel is earlier than 0:1.10.3-10.el6_4.3 OR krb5-workstation is earlier than 0:1.10.3-10.el6_4.3 OR krb5-libs is earlier than 0:1.10.3-10.el6_4.3 OR krb5-pkinit-openssl is earlier than 0:1.10.3-10.el6_4.3 OR krb5-server is earlier than 0:1.10.3-10.el6_4.3 OR krb5 is earlier than 0:1.10.3-10.el6_4.3 Operation system section Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 OR The operating system installed on the system is CentOS Linux 5.x AND Packages section krb5-server-ldap is earlier than 0:1.6.1-70.el5_9.2 OR krb5-devel is earlier than 0:1.6.1-70.el5_9.2 OR krb5-workstation is earlier than 0:1.6.1-70.el5_9.2 OR krb5-libs is earlier than 0:1.6.1-70.el5_9.2 OR krb5-server is earlier than 0:1.6.1-70.el5_9.2 OR krb5 is earlier than 0:1.6.1-70.el5_9.2
BACK