Oval Definition:	oval:org.mitre.oval:def:7550
Revision Date: 2015-04-20 Version: 27 Title: HP-UX Running Kerberos, Remote Denial of Service (DoS), Execution of Arbitrary Code Description: Stack-based buffer overflow in the rename_principal_2_svc function in kadmind for MIT Kerberos 1.5.3, 1.6.1, and other versions allows remote authenticated users to execute arbitrary code via a crafted request to rename a principal. Family: unix Class: vulnerability Status: ACCEPTED Reference(s): CVE-2007-2798 Platform(s): HP-UX 11 Product(s): Definition Synopsis Criteria meets HP Security Bulletin HPSBUX02544 HP-UX B.11.31 AND filesets tests KRB5-Client.KRB5-PRG is installed OR KRB5-Client.KRB5-64SLIB is installed OR KRB5-Client.KRB5-IA32SLIB is installed OR KRB5-Client.KRB5-IA64SLIB is installed OR KRB5-Client.KRB5-RUN is installed OR KRB5-Client.KRB5-SHLIB is installed AND NOT Patch PHSS_41168 is installed OR Criteria meets HP Security Bulletin HPSBUX02544 HP-UX B.11.23 AND filesets tests KRB5-Client.KRB5-PRG is installed OR KRB5-Client.KRB5-64SLIB is installed OR KRB5-Client.KRB5-IA32SLIB is installed OR KRB5-Client.KRB5-IA64SLIB is installed OR KRB5-Client.KRB5-RUN is installed OR KRB5-Client.KRB5-SHLIB is installed AND NOT Patch PHSS_41167 is installed OR Criteria meets HP Security Bulletin HPSBUX02544 HP-UX B.11.11 AND filesets tests KRB5-Client.KRB5-SHLIB is installed OR KRB5-Client.KRB5-PRG is installed OR KRB5-Client.KRB5-RUN is installed OR KRB5-Client.KRB5-64SLIB is installed AND NOT Patch PHSS_41166 is installed OR Criteria meets HP Security Bulletin HPSBUX02544 HP-UX B.11.23 AND filesets tests krb5client.KRB5-64SLIB-A version is less than D.1.6.2.08 OR krb5client.KRB5-PRG-A version is less than D.1.6.2.08 OR krb5client.KRB5-RUN-A version is less than D.1.6.2.08 OR krb5client.KRB5-SHLIB-A version is less than D.1.6.2.08 OR krb5client.KRB5IA32SLIB-A version is less than D.1.6.2.08 OR krb5client.KRB5IA64SLIB-A version is less than D.1.6.2.08 OR Criteria meets HP Security Bulletin HPSBUX02544 HP-UX B.11.11 AND filesets tests krb5client.KRB5-64SLIB-A version is less than C.1.3.5.10 OR krb5client.KRB5-PRG-A version is less than C.1.3.5.10 OR krb5client.KRB5-RUN-A version is less than C.1.3.5.10 OR krb5client.KRB5-SHLIB-A version is less than C.1.3.5.10 OR Criteria meets HP Security Bulletin HPSBUX02544 HP-UX B.11.31 AND filesets tests krb5client.KRB5-64SLIB-A version is less than E.1.6.2.08 OR krb5client.KRB5-PRG-A version is less than E.1.6.2.08 OR krb5client.KRB5-RUN-A version is less than E.1.6.2.08 OR krb5client.KRB5-SHLIB-A version is less than E.1.6.2.08 OR krb5client.KRB5IA32SLIB-A version is less than E.1.6.2.08 OR krb5client.KRB5IA64SLIB-A version is less than E.1.6.2.08
BACK