what you don't know can hurt you

Mandriva Linux Security Advisory 2013-042

Mandriva Linux Security Advisory 2013-042
Posted Apr 5, 2013
Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2013-042 - Fixed a kadmind denial of service issue, which could only be triggered by an administrator with the create privilege. The MIT krb5 KDC daemon can free an uninitialized pointer while processing an unusual AS-REQ, corrupting the process heap and possibly causing the daemon to abnormally terminate. An attacker could use this vulnerability to execute malicious code, but exploiting frees of uninitialized pointers to execute code is believed to be difficult. It is possible that a legitimate client that is misconfigured in an unusual way could trigger this vulnerability. It was reported that the KDC plugin for PKINIT could dereference a NULL pointer when a malformed packet caused processing to terminate early, which led to a crash of the KDC process. An attacker would require a valid PKINIT certificate or have observed a successful PKINIT authentication to execute a successful attack. In addition, an unauthenticated attacker could execute the attack of anonymouse PKINIT was enabled. The updated packages have been patched to correct these issues.

tags | advisory, denial of service
systems | linux, mandriva
advisories | CVE-2012-1013, CVE-2012-1015, CVE-2013-1415
MD5 | 1f5c843eedb072250f2fa12d8bd0eb2d

Mandriva Linux Security Advisory 2013-042

Change Mirror Download
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Advisory MDVSA-2013:042
http://www.mandriva.com/en/support/security/
_______________________________________________________________________

Package : krb5
Date : April 5, 2013
Affected: Business Server 1.0
_______________________________________________________________________

Problem Description:

Multiple vulnerabilities has been discovered and corrected in krb5:

Fix a kadmind denial of service issue (null pointer dereference),
which could only be triggered by an administrator with the create
privilege (CVE-2012-1013).

The MIT krb5 KDC (Key Distribution Center) daemon can free an
uninitialized pointer while processing an unusual AS-REQ, corrupting
the process heap and possibly causing the daemon to abnormally
terminate. An attacker could use this vulnerability to execute
malicious code, but exploiting frees of uninitialized pointers to
execute code is believed to be difficult. It is possible that a
legitimate client that is misconfigured in an unusual way could
trigger this vulnerability (CVE-2012-1015).

It was reported that the KDC plugin for PKINIT could dereference a
NULL pointer when a malformed packet caused processing to terminate
early, which led to a crash of the KDC process. An attacker would
require a valid PKINIT certificate or have observed a successful
PKINIT authentication to execute a successful attack. In addition,
an unauthenticated attacker could execute the attack of anonymouse
PKINIT was enabled (CVE-2013-1415).

The updated packages have been patched to correct these issues.
_______________________________________________________________________

References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1013
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1015
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1415
https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0087
_______________________________________________________________________

Updated Packages:

Mandriva Business Server 1/X86_64:
9d8b7ac8e91d9e5be013737a729ed09a mbs1/x86_64/krb5-1.9.2-3.1.mbs1.x86_64.rpm
4898b7bcd48c6c1ff6efcc680c406cc7 mbs1/x86_64/krb5-pkinit-openssl-1.9.2-3.1.mbs1.x86_64.rpm
9ef4d8be5cb6e88d6ef3952ec504273a mbs1/x86_64/krb5-server-1.9.2-3.1.mbs1.x86_64.rpm
0a5bbfc25b74583e36e0ba830c7be2ab mbs1/x86_64/krb5-server-ldap-1.9.2-3.1.mbs1.x86_64.rpm
eddfef15d9c336314d61787703649c56 mbs1/x86_64/krb5-workstation-1.9.2-3.1.mbs1.x86_64.rpm
27979548da847aaaddd150950e34da62 mbs1/x86_64/lib64krb53-1.9.2-3.1.mbs1.x86_64.rpm
2c7852f257638bffa72f1d52af0c3e4c mbs1/x86_64/lib64krb53-devel-1.9.2-3.1.mbs1.x86_64.rpm
b77e0ce1f3b8f4e9beb282cfafc333c2 mbs1/SRPMS/krb5-1.9.2-3.1.mbs1.src.rpm
_______________________________________________________________________

To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.

All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:

gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

You can view other update advisories for Mandriva Linux at:

http://www.mandriva.com/en/support/security/advisories/

If you want to report vulnerabilities, please contact

security_(at)_mandriva.com
_______________________________________________________________________

Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iD8DBQFRXq86mqjQ0CJFipgRAg/BAJ9b8g2yuHa9pkr8biuJZjRV0UQwyQCfcNQg
rkEu5skhpivUzDVh5BDwG3w=
=23gP
-----END PGP SIGNATURE-----


Comments

RSS Feed Subscribe to this comment feed

No comments yet, be the first!

Login or Register to post a comment

File Archive:

July 2019

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Jul 1st
    34 Files
  • 2
    Jul 2nd
    15 Files
  • 3
    Jul 3rd
    9 Files
  • 4
    Jul 4th
    8 Files
  • 5
    Jul 5th
    2 Files
  • 6
    Jul 6th
    3 Files
  • 7
    Jul 7th
    1 Files
  • 8
    Jul 8th
    15 Files
  • 9
    Jul 9th
    15 Files
  • 10
    Jul 10th
    20 Files
  • 11
    Jul 11th
    17 Files
  • 12
    Jul 12th
    16 Files
  • 13
    Jul 13th
    2 Files
  • 14
    Jul 14th
    1 Files
  • 15
    Jul 15th
    20 Files
  • 16
    Jul 16th
    27 Files
  • 17
    Jul 17th
    7 Files
  • 18
    Jul 18th
    5 Files
  • 19
    Jul 19th
    12 Files
  • 20
    Jul 20th
    0 Files
  • 21
    Jul 21st
    0 Files
  • 22
    Jul 22nd
    0 Files
  • 23
    Jul 23rd
    0 Files
  • 24
    Jul 24th
    0 Files
  • 25
    Jul 25th
    0 Files
  • 26
    Jul 26th
    0 Files
  • 27
    Jul 27th
    0 Files
  • 28
    Jul 28th
    0 Files
  • 29
    Jul 29th
    0 Files
  • 30
    Jul 30th
    0 Files
  • 31
    Jul 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2019 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close