CVE-2008-3274 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2008-3274
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-3274

Description: The default configuration of Red Hat Enterprise IPA 1.0.0 and FreeIPA before 1.1.1 places ldap:///anyone on the read ACL for the krbMKey attribute, which allows remote attackers to obtain the Kerberos master key via an anonymous LDAP query.

CVE Status: Candidate

References: ST 1020850 SAID Secunia Advisory: SA31861 REDHAT http://rhn.redhat.com/errata/RHSA-2008-0860.html FEDORA CONFIRM http://www.freeipa.org/page/News http://www.freeipa.org/page/Downloads http://www.freeipa.org/page/CVE-2008-3274 http://git.fedorahosted.org/git/freeipa.git/?p=freeipa.git;a=commit;h=9932887f2af38b9701efec27707648c026ec445c BID 31111

Return to the previous page.