Oval Definition:oval:org.mitre.oval:def:23920
Revision Date:2014-05-26Version:15
Title:ELSA-2013:0942: krb5 security update (Moderate)
Description:schpw.c in the kpasswd service in kadmind in MIT Kerberos 5 (aka krb5) before 1.11.3 does not properly validate UDP packets before sending responses, which allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged packet that triggers a communication loop, as demonstrated by krb_pingpong.nasl, a related issue to CVE-1999-0103.
Family:unixClass:patch
Status:ACCEPTEDReference(s):CVE-2002-2443
ELSA-2013:0942-01
Platform(s):Oracle Linux 5
Oracle Linux 6
Product(s):krb5
Definition Synopsis
  • rpm test
  • Oracle Linux 6.x
  • AND rpm test
  • krb5-server-ldap is earlier than 0:1.10.3-10.el6_4.3
  • OR krb5-devel is earlier than 0:1.10.3-10.el6_4.3
  • OR krb5-workstation is earlier than 0:1.10.3-10.el6_4.3
  • OR krb5-libs is earlier than 0:1.10.3-10.el6_4.3
  • OR krb5-pkinit-openssl is earlier than 0:1.10.3-10.el6_4.3
  • OR krb5-server is earlier than 0:1.10.3-10.el6_4.3
  • OR krb5 is earlier than 0:1.10.3-10.el6_4.3
  • OR rpm test
  • Oracle Linux 5.x
  • AND rpm test
  • krb5-server-ldap is earlier than 0:1.6.1-70.el5_9.2
  • OR krb5-devel is earlier than 0:1.6.1-70.el5_9.2
  • OR krb5-workstation is earlier than 0:1.6.1-70.el5_9.2
  • OR krb5-libs is earlier than 0:1.6.1-70.el5_9.2
  • OR krb5-server is earlier than 0:1.6.1-70.el5_9.2
  • OR krb5 is earlier than 0:1.6.1-70.el5_9.2
    • BACK