exploit the possibilities

Mandriva Linux Security Advisory 2010-054

Mandriva Linux Security Advisory 2010-054
Posted Mar 5, 2010
Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2010-054 - Pam_krb5 2.2.14 through 2.3.4 generates different password prompts depending on whether the user account exists, which allows remote attackers to enumerate valid usernames. This update provides the version 2.3.5 of pam_krb5, which is not vulnerable to this issue.

tags | advisory, remote
systems | linux, mandriva
advisories | CVE-2009-1384
MD5 | ef415f90257e771135bf236a39a74697

Mandriva Linux Security Advisory 2010-054

Change Mirror Download

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Advisory MDVSA-2010:054
http://www.mandriva.com/security/
_______________________________________________________________________

Package : pam_krb5
Date : March 4, 2010
Affected: 2009.0, 2009.1, Enterprise Server 5.0
_______________________________________________________________________

Problem Description:

Pam_krb5 2.2.14 through 2.3.4 generates different password prompts
depending on whether the user account exists, which allows remote
attackers to enumerate valid usernames (CVE-2009-1384).

This update provides the version 2.3.5 of pam_krb5, which is not
vulnerable to this issue.
_______________________________________________________________________

References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1384
_______________________________________________________________________

Updated Packages:

Mandriva Linux 2009.0:
0d807317d9e0fd0d25b8cdfde550a813 2009.0/i586/pam_krb5-2.3.5-0.1mdv2009.0.i586.rpm
eec3b496e0d49cdf5acc2938e87d7be9 2009.0/SRPMS/pam_krb5-2.3.5-0.1mdv2009.0.src.rpm

Mandriva Linux 2009.0/X86_64:
5e51454148dda7c08020265d2c38b8c2 2009.0/x86_64/pam_krb5-2.3.5-0.1mdv2009.0.x86_64.rpm
eec3b496e0d49cdf5acc2938e87d7be9 2009.0/SRPMS/pam_krb5-2.3.5-0.1mdv2009.0.src.rpm

Mandriva Linux 2009.1:
7ee29d86ae8cf64ab1b9a2fa6d84e4de 2009.1/i586/pam_krb5-2.3.5-0.1mdv2009.1.i586.rpm
c032fb6b8490cb5c1898a333e4f8b07e 2009.1/SRPMS/pam_krb5-2.3.5-0.1mdv2009.1.src.rpm

Mandriva Linux 2009.1/X86_64:
8a0ff5a977f141f1c494f316280966c5 2009.1/x86_64/pam_krb5-2.3.5-0.1mdv2009.1.x86_64.rpm
c032fb6b8490cb5c1898a333e4f8b07e 2009.1/SRPMS/pam_krb5-2.3.5-0.1mdv2009.1.src.rpm

Mandriva Enterprise Server 5:
81a267d32261fca0544deb4a41226fb8 mes5/i586/pam_krb5-2.3.5-0.1mdvmes5.i586.rpm
24dbd8d940e0d842577d3ce7f8c7ee00 mes5/SRPMS/pam_krb5-2.3.5-0.1eugeni2010.1.src.rpm

Mandriva Enterprise Server 5/X86_64:
8d5fa51d3bb8b9c1adb9b2f8e65a8885 mes5/x86_64/pam_krb5-2.3.5-0.1mdvmes5.x86_64.rpm
24dbd8d940e0d842577d3ce7f8c7ee00 mes5/SRPMS/pam_krb5-2.3.5-0.1eugeni2010.1.src.rpm
_______________________________________________________________________

To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.

All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:

gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

You can view other update advisories for Mandriva Linux at:

http://www.mandriva.com/security/advisories

If you want to report vulnerabilities, please contact

security_(at)_mandriva.com
_______________________________________________________________________

Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iD8DBQFLj7FzmqjQ0CJFipgRAr2uAJ4/lXZzr3XVPgd30y/NNkZdqsh4AACff9XE
Oopf/jjCQ/wYzq1hfiRmXOM=
=lnmi
-----END PGP SIGNATURE-----
Login or Register to add favorites

File Archive:

January 2022

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Jan 1st
    2 Files
  • 2
    Jan 2nd
    0 Files
  • 3
    Jan 3rd
    20 Files
  • 4
    Jan 4th
    4 Files
  • 5
    Jan 5th
    37 Files
  • 6
    Jan 6th
    20 Files
  • 7
    Jan 7th
    4 Files
  • 8
    Jan 8th
    0 Files
  • 9
    Jan 9th
    0 Files
  • 10
    Jan 10th
    18 Files
  • 11
    Jan 11th
    8 Files
  • 12
    Jan 12th
    19 Files
  • 13
    Jan 13th
    31 Files
  • 14
    Jan 14th
    2 Files
  • 15
    Jan 15th
    2 Files
  • 16
    Jan 16th
    2 Files
  • 17
    Jan 17th
    18 Files
  • 18
    Jan 18th
    13 Files
  • 19
    Jan 19th
    15 Files
  • 20
    Jan 20th
    29 Files
  • 21
    Jan 21st
    12 Files
  • 22
    Jan 22nd
    0 Files
  • 23
    Jan 23rd
    0 Files
  • 24
    Jan 24th
    17 Files
  • 25
    Jan 25th
    0 Files
  • 26
    Jan 26th
    0 Files
  • 27
    Jan 27th
    0 Files
  • 28
    Jan 28th
    0 Files
  • 29
    Jan 29th
    0 Files
  • 30
    Jan 30th
    0 Files
  • 31
    Jan 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2020 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close