It was discovered that a buffer overflow of the library for secure RPC communication over the rpcsec_gss protocol allows the execution of arbitrary code.

The oldstable distribution (sarge) doesn't contain librpcsecgss.

Updated krb5 packages that correct a security flaw are now available for Red Hat Enterprise Linux 5.

This update has been rated as having important security impact by the Red Hat Security Response Team.

Kerberos is a network authentication system which allows clients and servers to authenticate to each other through use of symmetric encryption and a trusted third party, the KDC. kadmind is the KADM5 administration server.

The MIT Kerberos Team discovered a problem with the originally published patch for svc_auth_gss.c (CVE-2007-3999). A remote unauthenticated attacker who can access kadmind could trigger this flaw and cause kadmind to crash. On Red Hat Enterprise Linux 5 it is not possible to exploit this flaw to run arbitrary code as the overflow is blocked by FORTIFY_SOURCE. (CVE-2007-4743)

This issue did not affect the versions of Kerberos distributed with Red Hat Enterprise Linux 2.1, 3, or 4.

Users of krb5-server are advised to update to these erratum packages which contain a corrected backported fix for this issue.

An updated nfs-utils-lib package to correct two security flaws is now available for Red Hat Enterprise Linux 5.

This update has been rated as having important security impact by the Red Hat Security Response Team.

The nfs-utils-lib package contains support libraries that are needed by the commands and daemons of the nfs-utils package.

The updated nfs-utils package fixes the following vulnerabilities :

Tenable Network Security discovered a stack-based buffer overflow flaw in the RPC library used by nfs-utils-lib. A remote unauthenticated attacker who can access an application linked against nfs-utils-lib could trigger this flaw and cause the application to crash. On Red Hat Enterprise Linux 5 it is not possible to exploit this flaw to run arbitrary code as the overflow is blocked by FORTIFY_SOURCE.
(CVE-2007-3999)

Tony Ernst from SGI has discovered a flaw in the way nfsidmap maps NFSv4 unknown uids. If an unknown user ID is encountered on an NFSv4 mounted filesystem, the files will default to being owned by 'root' rather than 'nobody'. (CVE-2007-4135)

Users of nfs-utils-lib are advised to upgrade to this updated package, which contains backported patches to resolve these issues.

- Thu Jan 24 2008 Steve Dickson <steved at redhat.com>     0.1.7-15

    - Protect from buffer overflow in the GSS code. (bz       362121)

    - Mon Dec 17 2007 Steve Dickson <steved at redhat.com>       0.1.7-14

    - Fixed typo in /etc/netconfig file (bz 414471)

    - Thu Oct 25 2007 Steve Dickson <steved at redhat.com>       0.1.7-13

    - Added a check for the ARM arch (bz 351071)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update incorporates fixes for a stack overflow in the rpcsec_gss implementation in libgssrpc (CVE-2007-3999) and a potential write through an uninitialized pointer in kadmind (CVE-2007-4000).

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is running a version of Mac OS X 10.4 that is older than version 10.4.11 or a version of Mac OS X 10.3 that does not have Security Update 2007-008 applied.  This update contains several security fixes for the following programs :


 - Flash Player Plugin
 - AppleRAID
 - BIND
 - bzip2
 - CFFTP
 - CFNetwork
 - CoreFoundation
 - CoreText
 - Kerberos
 - Kernel
 - remote_cmds
 - Networking
 - NFS
 - NSURL
 - Safari
 - SecurityAgent
 - WebCore
 - WebKit

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
26029	Debian DSA-1368-1 : librpcsecgss - buffer overflow	Nessus	Debian Local Security Checks	2007/9/14	2021/1/4	critical
26052	RHEL 5 : krb5 (RHSA-2007:0892)	Nessus	Red Hat Local Security Checks	2007/9/14	2021/1/14	critical
26907	RHEL 5 : nfs-utils-lib (RHSA-2007:0951)	Nessus	Red Hat Local Security Checks	2007/10/3	2021/1/14	critical
31362	Fedora 8 : libtirpc-0.1.7-15.fc8 (2008-1017)	Nessus	Fedora Local Security Checks	2008/3/7	2021/1/11	critical
27744	Fedora 7 : krb5-1.6.1-3.fc7 (2007-2017)	Nessus	Fedora Local Security Checks	2007/11/6	2021/1/11	critical
4284	Mac OS X < 10.4.11 Multiple Vulnerabilities (Security Update 2007-008)	Nessus Network Monitor	Operating System Detection	2007/11/15	2019/3/6	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical