Secunia Logo
Netsikker nu! 2008
 
Mandriva update for krb5
Secunia Advisory: SA24979
Release Date: 2007-04-23
Popularity: 4,405 views

Critical:
Less critical
Impact: Privilege escalation
Where: Local system
Solution Status: Vendor Patch

OS:Mandriva Linux 2007.0

Subscribe: Instant alerts on relevant vulnerabilities


Description:
Mandriva has issued an update for krb5. This fixes a security issue, which can be exploited by malicious, local users to gain escalated privileges.

The security issue is due to an error where modules are loaded from a certain potentially insecure location and can be exploited to execute arbitrary code with escalated privileges.

Solution:
Apply updated packages.

-- Mandriva Linux 2007.1 --

1f920aac69205ebc55feb4483b88f1be 2007.1/i586/ftp-client-krb5-1.5.2-6.2mdv2007.1.i586.rpm
33c691d619af154edf28417b38c1ab90 2007.1/i586/ftp-server-krb5-1.5.2-6.2mdv2007.1.i586.rpm
ffd93d8b493f4d3cad20d1387021ed91 2007.1/i586/krb5-server-1.5.2-6.2mdv2007.1.i586.rpm
5b1dde7e492cdd0fc5b131c4df008bf3 2007.1/i586/krb5-workstation-1.5.2-6.2mdv2007.1.i586.rpm
f65941778953f0396f3307872d05e5ae 2007.1/i586/libkrb53-1.5.2-6.2mdv2007.1.i586.rpm
a28df16eab4e38fa425ea8f2c0cd482d 2007.1/i586/libkrb53-devel-1.5.2-6.2mdv2007.1.i586.rpm
a6866af02d2dcad5688a9a722c42abaf 2007.1/i586/telnet-client-krb5-1.5.2-6.2mdv2007.1.i586.rpm
d950b8428b80b7aa72b8b62228616fab 2007.1/i586/telnet-server-krb5-1.5.2-6.2mdv2007.1.i586.rpm
f3d13c1b5c10f990288e2bb1ae8fbec9 2007.1/SRPMS/krb5-1.5.2-6.2mdv2007.1.src.rpm

-- Mandriva Linux 2007.1/X86_64 --

84de03a0a6a6e943794ec27a67bbcefd 2007.1/x86_64/ftp-client-krb5-1.5.2-6.2mdv2007.1.x86_64.rpm
3f8e1a9bd6af23839750f6376dd5c7b4 2007.1/x86_64/ftp-server-krb5-1.5.2-6.2mdv2007.1.x86_64.rpm
0a0c097aea83b5e524a15706cd73bcd1 2007.1/x86_64/krb5-server-1.5.2-6.2mdv2007.1.x86_64.rpm
95c2232afc4394f48731c1f9410eea9d 2007.1/x86_64/krb5-workstation-1.5.2-6.2mdv2007.1.x86_64.rpm
6877a85fe2ce8766bba68090163fb67d 2007.1/x86_64/lib64krb53-1.5.2-6.2mdv2007.1.x86_64.rpm
19506808bf27f7eeac1bbdb5c0efa98c 2007.1/x86_64/lib64krb53-devel-1.5.2-6.2mdv2007.1.x86_64.rpm
147dec07b177c00284559c1d205779bb 2007.1/x86_64/telnet-client-krb5-1.5.2-6.2mdv2007.1.x86_64.rpm
f133917514ef86be627e63debb1ca379 2007.1/x86_64/telnet-server-krb5-1.5.2-6.2mdv2007.1.x86_64.rpm
f3d13c1b5c10f990288e2bb1ae8fbec9 2007.1/SRPMS/krb5-1.5.2-6.2mdv2007.1.src.rpm

Provided and/or discovered by:
Reported by the vendor.

Original Advisory:
http://www.mandriva.com/security/advisories?name=MDKA-2007:026
http://qa.mandriva.com/show_bug.cgi?id=30349


Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
  
Latest Advisories

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.

Most Popular - 3 Hours

1. phpBB "url" bbcode Script Insertion Vulnerability // 31 views
2. My PHP Indexer "d" File Disclosure Vulnerability // 31 views
3. WinFTP "PASV" Denial of Service Vulnerability // 30 views
4. Joomla Ignite Gallery Component "gallery" SQL Injection // 29 views
5. Joomla Mad4Joomla Mailforms Component "jid" SQL Injection // 27 views
6. MunzurSoft Wep Portal W3 "kat" SQL Injection Vulnerability // 24 views
7. chm2pdf Insecure Temporary Directories // 24 views
8. phpBB BBcode "url" Script Insertion Vulnerability // 24 views
9. Ayco Okul "linkid" SQL Injection Vulnerability // 22 views
10. Real Estates Classifieds "cat" SQL Injection Vulnerability // 22 views