Oval Definition:oval:org.mitre.oval:def:7452
Revision Date:2014-06-23Version:20
Title:DSA-1969 krb5 -- integer underflow
Description:It was discovered that krb5, a system for authenticating users and services on a network, is prone to integer underflow in the AES and RC4 decryption operations of the crypto library. A remote attacker can cause crashes, heap corruption, or, under extraordinarily unlikely conditions, arbitrary code execution.
Family:unixClass:patch
Status:ACCEPTEDReference(s):CVE-2009-4212
DSA-1969
Platform(s):Debian GNU/Linux 4.0
Debian GNU/Linux 5.0
Product(s):krb5
Definition Synopsis
  • Release section
  • Debian GNU/Linux 5.0 is installed
  • AND Architecture section
  • Architecture independent section
  • Installed architecture is all
  • AND krb5-doc is earlier than 1.6.dfsg.4~beta1-5lenny2
  • OR Architecture dependent section
  • Supported architectures section
  • Installed architecture is s390
  • OR Installed architecture is amd64
  • OR Installed architecture is sparc
  • OR Installed architecture is arm
  • OR Installed architecture is i386
  • OR Installed architecture is armel
  • OR Installed architecture is mips
  • OR Installed architecture is ia64
  • OR Installed architecture is alpha
  • OR Installed architecture is powerpc
  • OR Installed architecture is mipsel
  • OR Installed architecture is hppa
  • AND Packages section
  • krb5-rsh-server is earlier than 1.6.dfsg.4~beta1-5lenny2
  • OR krb5-kdc-ldap is earlier than 1.6.dfsg.4~beta1-5lenny2
  • OR krb5-telnetd is earlier than 1.6.dfsg.4~beta1-5lenny2
  • OR libkrb53 is earlier than 1.6.dfsg.4~beta1-5lenny2
  • OR libkrb5-dev is earlier than 1.6.dfsg.4~beta1-5lenny2
  • OR krb5-ftpd is earlier than 1.6.dfsg.4~beta1-5lenny2
  • OR krb5-pkinit is earlier than 1.6.dfsg.4~beta1-5lenny2
  • OR krb5-admin-server is earlier than 1.6.dfsg.4~beta1-5lenny2
  • OR libkadm55 is earlier than 1.6.dfsg.4~beta1-5lenny2
  • OR libkrb5-dbg is earlier than 1.6.dfsg.4~beta1-5lenny2
  • OR krb5-user is earlier than 1.6.dfsg.4~beta1-5lenny2
  • OR krb5-clients is earlier than 1.6.dfsg.4~beta1-5lenny2
  • OR krb5-kdc is earlier than 1.6.dfsg.4~beta1-5lenny2
  • OR Release section
  • Debian GNU/Linux 4.0 is installed.
  • AND Architecture section
  • Architecture independent section
  • Installed architecture is all
  • AND krb5-doc is earlier than 1.4.4-7etch8
  • OR krb5-rsh-server is earlier than 1.4.4-7etch8
  • OR krb5-telnetd is earlier than 1.4.4-7etch8
  • OR libkrb53 is earlier than 1.4.4-7etch8
  • OR libkrb5-dev is earlier than 1.4.4-7etch8
  • OR krb5-ftpd is earlier than 1.4.4-7etch8
  • OR krb5-admin-server is earlier than 1.4.4-7etch8
  • OR libkadm55 is earlier than 1.4.4-7etch8
  • OR libkrb5-dbg is earlier than 1.4.4-7etch8
  • OR krb5-user is earlier than 1.4.4-7etch8
  • OR krb5-clients is earlier than 1.4.4-7etch8
  • OR krb5-kdc is earlier than 1.4.4-7etch8
  • BACK