Secunia Logo
Netsikker nu! 2008
 
Fedora update for krb5
Secunia Advisory: SA13612
Release Date: 2004-12-22
Popularity: 10,352 views

Critical:
Moderately critical
Impact: Privilege escalation
System access
Where: From local network
Solution Status: Vendor Patch

OS:Fedora Core 2
Fedora Core 3

Subscribe: Instant alerts on relevant vulnerabilities

CVE reference:CVE-2004-0971
CVE-2004-1189
CVE-2004-0642
CVE-2004-0644
CVE-2004-0772


Description:
Fedora has issued an update for krb5. This fixes two vulnerabilities, which can be exploited by malicious, local users to perform certain actions on a vulnerable system with escalated privileges and potentially by malicious users to compromise a vulnerable system.

For more information:
SA12967
SA13592

NOTE: The update for Fedora Core 3 also fixes three older vulnerabilities:
SA12408

Solution:
Apply updates.

Fedora Core 2:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/

bb1c7d3306da401a8162189277ca1cad SRPMS/krb5-1.3.6-1.src.rpm
d825b1f0975f6f6a025eaf4b674a0793 x86_64/krb5-devel-1.3.6-1.x86_64.rpm
b496e0d27c48eaca71e468322a3ca555 x86_64/krb5-libs-1.3.6-1.x86_64.rpm
9c410337f39d59ee8860b32499cdb54b x86_64/krb5-server-1.3.6-1.x86_64.rpm
a524c1d52a7eca353114db7028c5bbc7 x86_64/krb5-workstation-1.3.6-1.x86_64.rpm
186c7300eca2536d2b84be68c8496ce1 x86_64/debug/krb5-debuginfo-1.3.6-1.x86_64.rpm
16ca27d33cea69c09f58dbe5facc6770 x86_64/krb5-libs-1.3.6-1.i386.rpm
10342208c7139a8813e8258e1df006da i386/krb5-devel-1.3.6-1.i386.rpm
16ca27d33cea69c09f58dbe5facc6770 i386/krb5-libs-1.3.6-1.i386.rpm
90f808b51955d1c63d07ad9819177897 i386/krb5-server-1.3.6-1.i386.rpm
4b2cfb50548f335bfdeca765d9d6312c i386/krb5-workstation-1.3.6-1.i386.rpm
05dc28d1fb4c0aff6788f921059f1419 i386/debug/krb5-debuginfo-1.3.6-1.i386.rpm

Fedora Core 3:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/

620af2cfdc4ac6329926ad39a46fa4a9 SRPMS/krb5-1.3.6-2.src.rpm
53f0d19182e4c3e1f2ad3d0ab023ac1e x86_64/krb5-devel-1.3.6-2.x86_64.rpm
c002f669da7a6eba997ea83b3f17da57 x86_64/krb5-libs-1.3.6-2.x86_64.rpm
bd80d207a93e61b0cf6877d5e5e11634 x86_64/krb5-server-1.3.6-2.x86_64.rpm
69eb76fca82bbd33049fdd5a7bdd4054 x86_64/krb5-workstation-1.3.6-2.x86_64.rpm
9b91a519f8f7581bf4ff23f884bde437 x86_64/debug/krb5-debuginfo-1.3.6-2.x86_64.rpm
8bb027a8f492b2526a591fbcd2cd2a6d x86_64/krb5-libs-1.3.6-2.i386.rpm
52b6f59f74267da95713cff9c17bced0 i386/krb5-devel-1.3.6-2.i386.rpm
8bb027a8f492b2526a591fbcd2cd2a6d i386/krb5-libs-1.3.6-2.i386.rpm
29ea7f4419753069975fa4cb001a9df3 i386/krb5-server-1.3.6-2.i386.rpm
f90428f6202b73bfda93c794be17386a i386/krb5-workstation-1.3.6-2.i386.rpm
9a7f84a93c22830e73b359107912db25 i386/debug/krb5-debuginfo-1.3.6-2.i386.rpm

Other References:
SA12967:
http://secunia.com/advisories/13592/

SA13592:
http://secunia.com/advisories/13592/

SA12408:
http://secunia.com/advisories/12408/


Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
  
Latest Advisories

Today
New advisories: 7
New vulnerabilities: 15
Updated advisories: 11

Less // 138 views
Debian update for openldap
Moderately // 117 views
Debian update for ruby1.9
Moderately // 121 views
Debian update for ruby1.8

10th Oct, 2008
New advisories: 15
New vulnerabilities: 83
Updated advisories: 39


Solutions | More...  


Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.

Most Popular - 3 Hours

1. Apache Tomcat "RemoteFilterValve" Security Bypass Security Issue // 129 views
2. Debian update for openldap // 105 views
3. Debian update for ruby1.8 // 93 views
4. GuildFTPd "LIST" Processing Buffer Overflow Vulnerability // 92 views
5. Debian update for ruby1.9 // 87 views
6. Sun Java System Web Proxy Server FTP Subsystem Buffer Overflow // 40 views
7. CUPS Multiple Vulnerabilities // 36 views
8. Apple Mac OS X Security Update Fixes Multiple Vulnerabilities // 32 views
9. Trend Micro ServerProtect Multiple Buffer Overflow Vulnerabilities // 29 views
10. Red Hat update for cups // 28 views