Test Kennung:	1.3.6.1.4.1.25623.1.0.52936
Kategorie:	Turbolinux Local Security Tests
Titel:	Turbolinux TLSA-2003-29 (krb5)
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing an update to krb5 announced via advisory TLSA-2003-29. - A faulty length check in the RPC library exposes kadmind to an integer overflow. - A vulnerability may allow the use of cut-and-paste attacks to fabricate krb4 tickets for unauthorized client principals if triple-DES keys are used to key krb4 services. - Buffer overrun and underrun problems exist in Kerberos principal name handling in unusual cases, such as names with zero components, names with one empty component, or host-based service principal names with no host name component. These vulnerabilities may allow remote attackers to gain the realm and to cause a denial of krb5 service. Solution: Please use the turbopkg (zabom) tool to apply the update. https://secure1.securityspace.com/smysecure/catid.html?in=TLSA-2003-29 Risk factor : High
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.