|
|
Family: Fedora Local Security Checks --> Category: infos
Fedora Core 2 2005-269: krb5 Vulnerability Scan
Vulnerability Scan Summary
Check for the version of the krb5 package
Detailed Explanation for this Vulnerability Test
The remote host is missing the patch for the advisory FEDORA-2005-269 (krb5).
Kerberos V5 is a trusted-third-party network authentication system,
which can improve your network's security by eliminating the insecure
practice of cleartext passwords.
Update Information:
Updated krb5 packages which fix two buffer overflow vulnerabilities
in the included Kerberos-aware telnet client are now available.
Kerberos is a networked authentication system which uses a trusted
third party (a KDC) to authenticate clients and servers to each
other.
The krb5-workstation package includes a Kerberos-aware telnet client.
Two buffer overflow flaws were discovered in the way the telnet
client handles messages from a server. A possible hacker may be able to
execute arbitrary code on a victim's machine if the victim can be
tricked into connecting to a malicious telnet server. The Common
Vulnerabilities and Exposures project (cve.mitre.org) has assigned
the names CVE-2005-0468 and CVE-2005-0469 to these issues.
Solution : http://www.fedoranews.org/blog/index.php?p=539
Threat Level: High
Click HERE for more information and discussions on this network vulnerability scan.
|
